{"spdxVersion": "SPDX-2.3", "dataLicense": "CC0-1.0", "SPDXID": "SPDXRef-DOCUMENT", "creationInfo": {"created": "2026-10-12T07:43:19Z", "creators": ["Tool: Konflux", "Organization: Fedora"]}, "name": "syft-1.54.1-0.2.hum1", "documentNamespace": "https://fedoraproject.org/syft-1.54.1-0.2.hum1.spdx.json", "packages": [{"SPDXID": "SPDXRef-SRPM", "name": "syft", "versionInfo": "1.54.1-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "syft-1.54.1-0.2.hum1.src.rpm", "licenseDeclared": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/syft@1.54.1-0.2.hum1?arch=src"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "335699b135909b1e2910e1c6987c0cc188e676c47c3e99a5afe862198b3cbd89"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: b'\\xc3\\xfc\\x93\\xef\\xa4\\xe1\\x93\\xf5THo6\\x9ebxl'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sha256header: 121db06192fd1d55bdeb3827dcca76b7c224336d2fc25c39a28793c125518afa"}]}, {"SPDXID": "SPDXRef-aarch64-syft", "name": "syft", "versionInfo": "1.54.1-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "syft-1.54.1-0.2.hum1.aarch64.rpm", "licenseDeclared": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/syft@1.54.1-0.2.hum1?arch=aarch64"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "76f875fbaa955dc8b2621a1c656347da5241534399ec1788c9e6334a33723a98"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: b'\\x0b\\xdf\\xe3\\x04\\x11\\xd7\\xbf\\xfb\\xeb\\x87\\xc2SO)\\t\\x85'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sha256header: 82a8570618347203ac5f53d7a8cf80ce1b61a168180568b43fbea18591ad7b3f"}]}, {"SPDXID": "SPDXRef-s390x-syft", "name": "syft", "versionInfo": "1.54.1-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "syft-1.54.1-0.2.hum1.s390x.rpm", "licenseDeclared": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/syft@1.54.1-0.2.hum1?arch=s390x"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "90ab4843d3092e6b834d351e7126495f582d43106376ab3f66a7255b24f239f1"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: b'V6`\\xc0\\xcd@\\x05\\xa5@\\x0e\\xed\\x02!\\xb6\\x87\\x0c'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sha256header: a1194076af8cb56cc0ed42dd85c185825738f951928c6fa3c18612956a418170"}]}, {"SPDXID": "SPDXRef-x86-64-syft", "name": "syft", "versionInfo": "1.54.1-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "syft-1.54.1-0.2.hum1.x86_64.rpm", "licenseDeclared": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/syft@1.54.1-0.2.hum1?arch=x86_64"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "f5e7538f66c72fecb96e1ca57b860663420636d4ee755e2fe3eb2f8cacb4f8cf"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: b'\\xe9\\x1d\\x9b-E\\xe9\\tK\\x9e\\xb3\\xc4\\x8b\\xf5\\xc4\\xb1\\x90'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sha256header: 9c0cec8e8cf249aa732af84596f3cc9875eec74c5302ea67e76a3892f7f92f1d"}]}, {"SPDXID": "SPDXRef-aarch64-syft-debuginfo", "name": "syft-debuginfo", "versionInfo": "1.54.1-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "syft-debuginfo-1.54.1-0.2.hum1.aarch64.rpm", "licenseDeclared": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/syft-debuginfo@1.54.1-0.2.hum1?arch=aarch64"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "342efac38b8c9054a734f3bcaeb3c3aae8c0389b152150d495f12bbdacfae882"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: b'\\x8b*\\x92o\\xde\\xce\\xf4\\xd0\\xce\\xc2\\xef3\\x83W(\\xd0'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sha256header: 5a682b1f0abc41efc2ef2016986e71a3bbec7b34b5fc6d6418e61d940752c2a4"}]}, {"SPDXID": "SPDXRef-s390x-syft-debuginfo", "name": "syft-debuginfo", "versionInfo": "1.54.1-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "syft-debuginfo-1.54.1-0.2.hum1.s390x.rpm", "licenseDeclared": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/syft-debuginfo@1.54.1-0.2.hum1?arch=s390x"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "cdf71fdfac1fa5c38f1976c4967c2e6d0c80887c8b6e90ecf86edd5c49cef79e"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: b'\\xebB\\xc9\\x15\\xdb\\xea\\n\\xcaWmZ\\x95<\\xe5\\x93\\x85'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sha256header: f8a78d1844c46b03344fdf86e4bab66f5fbf5481a9376a8c21be5c4d84a135ec"}]}, {"SPDXID": "SPDXRef-x86-64-syft-debuginfo", "name": "syft-debuginfo", "versionInfo": "1.54.1-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "syft-debuginfo-1.54.1-0.2.hum1.x86_64.rpm", "licenseDeclared": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/syft-debuginfo@1.54.1-0.2.hum1?arch=x86_64"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "430ee57ee85f18169f2951665617d2bf3db32dd7b5a0c4434df916f1fd3fac75"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: b'\\x11\\x1c\\x0bHB0\\xd3h\\x89\\xa6rnG\\x04\\x1cR'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sha256header: 4bc7f0a19d6bdc512fddfed6f8bea2c07d1124e4afee9520c1d70a031ab154b1"}]}, {"SPDXID": "SPDXRef-aarch64-syft-debugsource", "name": "syft-debugsource", "versionInfo": "1.54.1-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "syft-debugsource-1.54.1-0.2.hum1.aarch64.rpm", "licenseDeclared": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/syft-debugsource@1.54.1-0.2.hum1?arch=aarch64"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "b52e8771bf6548a74ab5c6e3ac7f3e23ba24a78ef45d74f5164eead4f34f43d8"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: b'\\xcf\\x02\\x8d\\x05\\x04C\\xd95\\x18q\\x98\\xc0\\x99\\xcc\\xdd\\xe5'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sha256header: 1da0e001bc656829d9655b94a9229835162269741a3c48fe66435ed54cd4408b"}]}, {"SPDXID": "SPDXRef-s390x-syft-debugsource", "name": "syft-debugsource", "versionInfo": "1.54.1-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "syft-debugsource-1.54.1-0.2.hum1.s390x.rpm", "licenseDeclared": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/syft-debugsource@1.54.1-0.2.hum1?arch=s390x"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "5645bf4607c2df28770ed5580b6fe46729e40605fe75d4232a483d37ea327d98"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: b'\\xa2z\\xd6\\x88\\xcfN\\xd6\\x08\\xa7\\xa14k7\\xc2\\xe5-'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sha256header: 85355cfb9f3e21e67b25b254b5a3f3891a03a9c42530aeeb3d24160e047d0c44"}]}, {"SPDXID": "SPDXRef-x86-64-syft-debugsource", "name": "syft-debugsource", "versionInfo": "1.54.1-0.2.hum1", "supplier": "Organization: Fedora", "downloadLocation": "NOASSERTION", "packageFileName": "syft-debugsource-1.54.1-0.2.hum1.x86_64.rpm", "licenseDeclared": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/syft-debugsource@1.54.1-0.2.hum1?arch=x86_64"}], "checksums": [{"algorithm": "SHA256", "checksumValue": "e45c3fd1187e7a67ac86da54c471fe8135b14c87a8cfffad212769cf34b2b0a7"}], "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: b'`k\\x93U\\x9a\\tN\\xcfZ^x\\xbd\\xdd\\x99\\x8c\\x92'"}, {"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sha256header: c4b4fc68c4c472ab6ee76efdd98396d178d4fef49164b5cb481c6e749520025a"}]}, {"SPDXID": "SPDXRef-Source0", "name": "syft", "versionInfo": "1.54.1", "packageFileName": "syft-1.54.1.tar.gz", "downloadLocation": "https://src.fedoraproject.org/repo/pkgs/rpms/syft/syft-1.54.1.tar.gz/sha512/ff6179acda8dab331a0fbf918c1bd061fc26e16d0f1bae2575ce6ae2558a0ea9db618cca3315282157c33f37b1ccec8c474b433eb7f0c24351e09de177ec53cc/syft-1.54.1.tar.gz", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "3d95b6a7e9c52b4d6bfa6c76cd6f3f3fa7905449371495479ba6823048be639c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/syft@1.54.1?download_url=https://src.fedoraproject.org/repo/pkgs/rpms/syft/syft-1.54.1.tar.gz/sha512/ff6179acda8dab331a0fbf918c1bd061fc26e16d0f1bae2575ce6ae2558a0ea9db618cca3315282157c33f37b1ccec8c474b433eb7f0c24351e09de177ec53cc/syft-1.54.1.tar.gz&checksum=sha512:ff6179acda8dab331a0fbf918c1bd061fc26e16d0f1bae2575ce6ae2558a0ea9db618cca3315282157c33f37b1ccec8c474b433eb7f0c24351e09de177ec53cc"}]}, {"SPDXID": "SPDXRef-Source0-origin", "name": "syft", "versionInfo": "1.54.1", "downloadLocation": "https://github.com/anchore/syft/archive/v1.54.1/syft-1.54.1.tar.gz", "packageFileName": "syft-1.54.1.tar.gz", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "3d95b6a7e9c52b4d6bfa6c76cd6f3f3fa7905449371495479ba6823048be639c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/syft@1.54.1?download_url=https://github.com/anchore/syft/archive/v1.54.1/syft-1.54.1.tar.gz&checksum=sha256:3d95b6a7e9c52b4d6bfa6c76cd6f3f3fa7905449371495479ba6823048be639c"}]}, {"SPDXID": "SPDXRef-Source1", "name": "syft-1.54.1", "versionInfo": "vendor", "packageFileName": "syft-1.54.1-vendor.tar.bz2", "downloadLocation": "https://src.fedoraproject.org/repo/pkgs/rpms/syft/syft-1.54.1-vendor.tar.bz2/sha512/84099fe0ed452336b1576c5bf691c88a029713fe116644ee73a08bfacdc18d78020f162856f3454a017635f994d64321716ba0e3e3f31a9d7cc378d17bfb76ca/syft-1.54.1-vendor.tar.bz2", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "44ba99f5a125a161f8109f6454fce61391cd1e5e3d7d33755b0ee37824db0ed8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/syft-1.54.1@vendor?download_url=https://src.fedoraproject.org/repo/pkgs/rpms/syft/syft-1.54.1-vendor.tar.bz2/sha512/84099fe0ed452336b1576c5bf691c88a029713fe116644ee73a08bfacdc18d78020f162856f3454a017635f994d64321716ba0e3e3f31a9d7cc378d17bfb76ca/syft-1.54.1-vendor.tar.bz2&checksum=sha512:84099fe0ed452336b1576c5bf691c88a029713fe116644ee73a08bfacdc18d78020f162856f3454a017635f994d64321716ba0e3e3f31a9d7cc378d17bfb76ca"}]}, {"SPDXID": "SPDXRef-Source2", "name": "go-vendor", "versionInfo": "tools.toml", "packageFileName": "go-vendor-tools.toml", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "checksums": [{"algorithm": "SHA256", "checksumValue": "06ec020e8ee660c7193888bf36c06a0677845ff9c698ce39e0373fe05f8444a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:generic/go-vendor@tools.toml"}]}, {"SPDXID": "SPDXRef-Buildroot-syft-aarch64", "name": "syft-buildroot-aarch64", "versionInfo": "da52d037", "downloadLocation": "NOASSERTION", "filesAnalyzed": false}, {"SPDXID": "SPDXRef-Buildroot-Package-R-srpm-macros-aarch64", "name": "R-srpm-macros", "versionInfo": "1.3.7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/R-srpm-macros-1.3.7-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: af95299e83e51b62a40fa7a42d357077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/R-srpm-macros@1.3.7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-add-determinism-aarch64", "name": "add-determinism", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/add-determinism-0.7.3-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f98d78029bd45bc3d649024a45ce17c6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/add-determinism@0.7.3-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-alternatives-aarch64", "name": "alternatives", "versionInfo": "1.33-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/alternatives-1.33-6.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: acd4c0c14bfe18cb245d0a16f0ddaa5a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/alternatives@1.33-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-docs-aarch64", "name": "annobin-docs", "versionInfo": "13.32-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/annobin-docs-13.32-1.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 18d60a72e7a0be13693c92c6e0d885c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-docs@13.32-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-aarch64", "name": "annobin-plugin-gcc", "versionInfo": "13.32-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/annobin-plugin-gcc-13.32-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: d31e83b90c107057a1121d31ba56720d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-plugin-gcc@13.32-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ansible-srpm-macros-aarch64", "name": "ansible-srpm-macros", "versionInfo": "1-22.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/ansible-srpm-macros-1-22.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 6343ff368e5236625d015dbc91e70769"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ansible-srpm-macros@1-22.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-askalono-cli-aarch64", "name": "askalono-cli", "versionInfo": "0.5.0-4.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/aarch64/os/Packages/a/askalono-cli-0.5.0-4.fc44.aarch64.rpm", "licenseDeclared": "Apache-2.0 AND CC0-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR BSL-1.0) AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: eae8d6430b2e5c31170f3b2d7f1f51bb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/askalono-cli@0.5.0-4.fc44?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-audit-libs-aarch64", "name": "audit-libs", "versionInfo": "4.2.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/a/audit-libs-4.2.1-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 6fac467d347d162d8ce3b35b75206dc5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/audit-libs@4.2.1-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bash-aarch64", "name": "bash", "versionInfo": "5.3.20-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/bash-5.3.20-1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 30a04b74b74cb05b208221994a6fae69"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bash@5.3.20-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-binutils-aarch64", "name": "binutils", "versionInfo": "2.46.1-1.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/binutils-2.46.1-1.3.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH Bison-exception-2.2) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND BSD-3-Clause AND GFDL-1.3-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 759d77c418b9d81a7648d2791e5c42c7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/binutils@2.46.1-1.3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-aarch64", "name": "build-reproducibility-srpm-macros", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/build-reproducibility-srpm-macros-0.7.3-3.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 4dea8bdbe97b4534f60d8a6d0b9c793c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/build-reproducibility-srpm-macros@0.7.3-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-libs-aarch64", "name": "bzip2-libs", "versionInfo": "1.0.8-24.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/bzip2-libs-1.0.8-24.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 7fe1a1592b12936460dc276a532df8e7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2-libs@1.0.8-24.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-aarch64", "name": "bzip2", "versionInfo": "1.0.8-24.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/b/bzip2-1.0.8-24.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 83f0af4d4c241cc82118a298f501cb03"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2@1.0.8-24.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ca-certificates-aarch64", "name": "ca-certificates", "versionInfo": "2026.2.90_v9.0.317-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/ca-certificates-2026.2.90_v9.0.317-1.1.hum1.noarch.rpm", "licenseDeclared": "MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: a195cd97c3daf258791a89c2b5af39d2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ca-certificates@2026.2.90_v9.0.317-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cmake-srpm-macros-aarch64", "name": "cmake-srpm-macros", "versionInfo": "4.3.0-5.6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cmake-srpm-macros-4.3.0-5.6.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-open-group AND Zlib AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: e2f14e03350d92477884a522df888c53"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cmake-srpm-macros@4.3.0-5.6.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-common-aarch64", "name": "coreutils-common", "versionInfo": "9.12-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/coreutils-common-9.12-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 00432e73aa7e8f8d82bb41466441d4ed"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils-common@9.12-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-aarch64", "name": "coreutils", "versionInfo": "9.12-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/coreutils-9.12-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: b7d057d25d185ea30f52ed55c681988a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils@9.12-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpio-aarch64", "name": "cpio", "versionInfo": "2.15-10.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cpio-2.15-10.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f77875899a01094a286314746b22d940"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpio@2.15-10.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpp-aarch64", "name": "cpp", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cpp-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: a611ee4e61820fcf829400383ee9409c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpp@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-config-default-aarch64", "name": "crypto-policies-config-default", "versionInfo": "20260812-1.git359ab16.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/crypto-policies-config-default-20260812-1.git359ab16.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 1e6fce169a2973e4f665428cb52ae9ad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies-config-default@20260812-1.git359ab16.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-aarch64", "name": "crypto-policies", "versionInfo": "20260812-1.git359ab16.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/crypto-policies-20260812-1.git359ab16.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9756d9b800cfeafa3f39e494328a620e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies@20260812-1.git359ab16.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-curl-aarch64", "name": "curl", "versionInfo": "8.22.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/curl-8.22.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 7b537dee74129daa42cb345356cb49ea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/curl@8.22.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-aarch64", "name": "cyrus-sasl-lib", "versionInfo": "2.1.28-37.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/c/cyrus-sasl-lib-2.1.28-37.2.hum1.aarch64.rpm", "licenseDeclared": "BSD-Attribution-HPND-disclaimer", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 3008fe0f694661a96ab85a997c2588aa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cyrus-sasl-lib@2.1.28-37.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-debugedit-aarch64", "name": "debugedit", "versionInfo": "5.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/d/debugedit-5.3-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 47dcf14fc5162a4b0c17db4dfcfc193e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/debugedit@5.3-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-diffutils-aarch64", "name": "diffutils", "versionInfo": "3.12-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/d/diffutils-3.12-6.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: e35b767ef8917507a2fe4e6a910ca89f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/diffutils@3.12-6.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-dwz-aarch64", "name": "dwz", "versionInfo": "0.17-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/d/dwz-0.17-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND GPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 3c0f22ca90ca43fc789f6fe8cb2ad2bc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dwz@0.17-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ed-aarch64", "name": "ed", "versionInfo": "1.22.6-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/ed-1.22.6-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: d9d972206c5fb68a5eb404b6bcef4ced"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ed@1.22.6-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-efi-srpm-macros-aarch64", "name": "efi-srpm-macros", "versionInfo": "6-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/efi-srpm-macros-6-9.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: cba49c2554beb37df9cc6bb744737e2b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/efi-srpm-macros@6-9.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-aarch64", "name": "elfutils-debuginfod-client", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/elfutils-debuginfod-client-0.196-1.1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: d8d203fd99c873559a67e6443ff174f2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-debuginfod-client@0.196-1.1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libelf-aarch64", "name": "elfutils-libelf", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/elfutils-libelf-0.196-1.1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 33f3b0f1b90d80a0dadbd7cc447c364c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libelf@0.196-1.1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libs-aarch64", "name": "elfutils-libs", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/elfutils-libs-0.196-1.1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 0595a64126ec97eb4d56b5cd73a38777"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libs@0.196-1.1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-aarch64", "name": "elfutils", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/elfutils-0.196-1.1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later) AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 0d70f8163d0190e72edab57ffae31ffe"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils@0.196-1.1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-erlang-srpm-macros-aarch64", "name": "erlang-srpm-macros", "versionInfo": "0.3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/erlang-srpm-macros-0.3.11-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 063020bc2b254fec865c06f313930cec"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/erlang-srpm-macros@0.3.11-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-expat-aarch64", "name": "expat", "versionInfo": "2.8.5-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/e/expat-2.8.5-1.2.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 6ff138c1441fc1b5f133acb582b3e364"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/expat@2.8.5-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-libs-aarch64", "name": "file-libs", "versionInfo": "5.48-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/file-libs-5.48-3.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: a540b886506755c536a09f999daa1c47"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file-libs@5.48-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-aarch64", "name": "filesystem-srpm-macros", "versionInfo": "3.18-59.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/filesystem-srpm-macros-3.18-59.1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: cff1a42588f4eb1a758735b668069a67"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem-srpm-macros@3.18-59.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-aarch64", "name": "filesystem", "versionInfo": "3.18-59.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/filesystem-3.18-59.1.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 67a1cc536f9cab735cb846baefddb7ea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem@3.18-59.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-aarch64", "name": "file", "versionInfo": "5.48-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/file-5.48-3.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9f3d10d98787fff380b03a8f3e77102a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file@5.48-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-findutils-aarch64", "name": "findutils", "versionInfo": "1:4.11.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/findutils-4.11.0-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f6ec1178a2de3f3dd2e67aab0bfa51f7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/findutils@4.11.0-2.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fonts-srpm-macros-aarch64", "name": "fonts-srpm-macros", "versionInfo": "1:5.0.0-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/fonts-srpm-macros-5.0.0-4.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 72e451571f24737949a256d091508d0c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fonts-srpm-macros@5.0.0-4.hum1?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-forge-srpm-macros-aarch64", "name": "forge-srpm-macros", "versionInfo": "0.4.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/forge-srpm-macros-0.4.0-5.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: bfbed65969ec708556df3750591a377d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/forge-srpm-macros@0.4.0-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fpc-srpm-macros-aarch64", "name": "fpc-srpm-macros", "versionInfo": "1.3-17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/f/fpc-srpm-macros-1.3-17.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 1f7e4cb902ccc37236f8d34ff8873cf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fpc-srpm-macros@1.3-17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gap-srpm-macros-aarch64", "name": "gap-srpm-macros", "versionInfo": "2-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gap-srpm-macros-2-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 70e3423696085d13791fefc0be7cdf15"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gap-srpm-macros@2-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gawk-aarch64", "name": "gawk", "versionInfo": "5.4.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gawk-5.4.1-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 02ea494697003941445d782d0f94b2d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gawk@5.4.1-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-aarch64", "name": "gcc-plugin-annobin", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gcc-plugin-annobin-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 856d8e3f146702081b65317a6da18f90"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc-plugin-annobin@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-aarch64", "name": "gcc", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gcc-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 555fbdebe005a6003d740878539d2db4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdb-minimal-aarch64", "name": "gdb-minimal", "versionInfo": "17.2-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gdb-minimal-17.2-6.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 8b52c99ad39fb4b6c9bc68140320c43f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdb-minimal@17.2-6.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdbm-libs-aarch64", "name": "gdbm-libs", "versionInfo": "1:1.26-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gdbm-libs-1.26-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f121be53d17f9bbca1ca50a948d12be1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdbm-libs@1.26-1.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ghc-srpm-macros-aarch64", "name": "ghc-srpm-macros", "versionInfo": "1.10-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/ghc-srpm-macros-1.10-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: c59363c566e4f370953f5f4b048e594e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ghc-srpm-macros@1.10-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-common-aarch64", "name": "glibc-common", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-common-2.43-9.2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f9a198e72a2894ed9ec88a654adf99b1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-common@2.43-9.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-devel-aarch64", "name": "glibc-devel", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-devel-2.43-9.2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: e42112d33f8547a881c1bb9ffdc1a6e3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-devel@2.43-9.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-gconv-extra-aarch64", "name": "glibc-gconv-extra", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-gconv-extra-2.43-9.2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: ae1cf12211d528ac9ae11fb34b1bb66b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-gconv-extra@2.43-9.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-aarch64", "name": "glibc-minimal-langpack", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-minimal-langpack-2.43-9.2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 0039d68e01dc9ac5d477a98ecdf2918e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-minimal-langpack@2.43-9.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-aarch64", "name": "glibc", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/glibc-2.43-9.2.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: e5a77566fe809a0ac7c2a5a2ec623de6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc@2.43-9.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gmp-aarch64", "name": "gmp", "versionInfo": "1:6.3.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gmp-6.3.0-6.1.hum1.aarch64.rpm", "licenseDeclared": "(LGPL-3.0-or-later OR GPL-2.0-or-later OR (LGPL-3.0-or-later AND GPL-2.0-or-later)) AND GFDL-1.3-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 166ae71bf4af463dff3d7c6f5023d699"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gmp@6.3.0-6.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnat-srpm-macros-aarch64", "name": "gnat-srpm-macros", "versionInfo": "7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnat-srpm-macros-7-3.hum1.noarch.rpm", "licenseDeclared": "FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 66efb6ab04e5e1a84478a688e2f149a3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnat-srpm-macros@7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnome-srpm-macros-aarch64", "name": "gnome-srpm-macros", "versionInfo": "1.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/aarch64/Packages/g/gnome-srpm-macros-1.0-1.fc44.noarch.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 2bbaa6afcb861d76b0036e4b5bf9b3be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnome-srpm-macros@1.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnulib-l10n-aarch64", "name": "gnulib-l10n", "versionInfo": "20241231-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnulib-l10n-20241231-4.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 5628836ab4d4e824bcadb20d87a01a33"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnulib-l10n@20241231-4.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-aarch64", "name": "gnupg2-dirmngr", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-dirmngr-2.4.9-18.2.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 573b7679ab4b9d60430280a4118102c2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-dirmngr@2.4.9-18.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-aarch64", "name": "gnupg2-gpg-agent", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-gpg-agent-2.4.9-18.2.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: ade2846c6a8b7bb8e8c3b0c63fb67f7f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpg-agent@2.4.9-18.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-aarch64", "name": "gnupg2-gpgconf", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-gpgconf-2.4.9-18.2.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: da48ec10f5d1daccbd975810b0b9c100"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpgconf@2.4.9-18.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-aarch64", "name": "gnupg2-keyboxd", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-keyboxd-2.4.9-18.2.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: e12f0d3a0a12adafdb2f9c93d96e60f5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-keyboxd@2.4.9-18.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-verify-aarch64", "name": "gnupg2-verify", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-verify-2.4.9-18.2.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 43419a3185e8322daad33b555b420bb8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-verify@2.4.9-18.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-aarch64", "name": "gnupg2", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnupg2-2.4.9-18.2.hum1.aarch64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: a5c1a31bb640a3b81e5b4c72524d1445"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2@2.4.9-18.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnutls-aarch64", "name": "gnutls", "versionInfo": "3.8.13-5.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gnutls-3.8.13-5.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 191df5a76f2ce6a009e3153d099cbcff"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnutls@3.8.13-5.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-filesystem-aarch64", "name": "go-filesystem", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/go-filesystem-3.8.0-3.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 21c344b50ec791073eecf2f78130e36d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-filesystem@3.8.0-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-rpm-macros-aarch64", "name": "go-rpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/go-rpm-macros-3.8.0-3.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 1cca57be53ff370d84ba6f32712ca1e2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-rpm-macros@3.8.0-3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-srpm-macros-aarch64", "name": "go-srpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/go-srpm-macros-3.8.0-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 58fd7d8eb056ce7d09e3ba375de1effc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-srpm-macros@3.8.0-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-vendor-tools-aarch64", "name": "go-vendor-tools", "versionInfo": "0.12.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/aarch64/Packages/g/go-vendor-tools-0.12.0-1.fc44.noarch.rpm", "licenseDeclared": "MIT AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 7c4ed6389413dbed713121b1168f24da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-vendor-tools@0.12.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-bin-aarch64", "name": "golang1.27-bin", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/golang1.27-bin-1.27.2-1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: ca801334afe32839aee19b91c43532dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-bin@1.27.2-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-src-aarch64", "name": "golang1.27-src", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/golang1.27-src-1.27.2-1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f40c9e87cab011209fed012b75f85d64"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-src@1.27.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-aarch64", "name": "golang1.27", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/golang1.27-1.27.2-1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: ee42ca71c1f43b31272dfa52dfa74d7a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27@1.27.2-1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golist-aarch64", "name": "golist", "versionInfo": "0.11.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/golist-0.11.0-2.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: b92a6bbb82038b2e3078acfb1c3f4220"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golist@0.11.0-2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgverify-aarch64", "name": "gpgverify", "versionInfo": "2.2-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gpgverify-2.2-5.hum1.noarch.rpm", "licenseDeclared": "Boehm-GC", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9637bdca60814388d4c5b144d923e6d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgverify@2.2-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-grep-aarch64", "name": "grep", "versionInfo": "3.12-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/grep-3.12-4.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 3f1164dfa8f8a8505d9e42cd93ae92b5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grep@3.12-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gzip-aarch64", "name": "gzip", "versionInfo": "1.15-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/g/gzip-1.15-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 1ab7c6152e06a467fc96821375eb1ed0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gzip@1.15-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-aarch64", "name": "hummingbird-gpg-keys", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/h/hummingbird-gpg-keys-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 01a73721cc0ecdcb5d9f3929f6777157"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-gpg-keys@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-release-aarch64", "name": "hummingbird-release", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/h/hummingbird-release-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: d1c993eba75002797ea72c3cd1266853"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-release@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-repos-aarch64", "name": "hummingbird-repos", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/h/hummingbird-repos-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 1704eb0434ddab68e1c756070246f576"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-repos@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-aarch64", "name": "ima-evm-utils-libs", "versionInfo": "1.6.2-12.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/i/ima-evm-utils-libs-1.6.2-12.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: a96435ab801796679b678799c4768d2e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ima-evm-utils-libs@1.6.2-12.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-info-aarch64", "name": "info", "versionInfo": "7.2-9.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/aarch64/os/Packages/i/info-7.2-9.fc44.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: ff57ae9e674b526c3d40eebc6a75d7f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/info@7.2-9.fc44?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jansson-aarch64", "name": "jansson", "versionInfo": "2.14-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/j/jansson-2.14-5.1.hum1.aarch64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: bf335621846a7b5ac53ffbc9a26e1326"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jansson@2.14-5.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-srpm-macros-aarch64", "name": "java-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/j/java-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT-0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 367fafb59cbd6a02034ba8bafdafe9c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-json-c-aarch64", "name": "json-c", "versionInfo": "0.18-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/j/json-c-0.18-9.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 35d1a4b8eecbbf9528f613f719cf4993"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/json-c@0.18-9.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-headers-aarch64", "name": "kernel-headers", "versionInfo": "7.2.0-61.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/k/kernel-headers-7.2.0-61.1.hum1.aarch64.rpm", "licenseDeclared": "((GPL-2.0-only WITH Linux-syscall-note) OR BSD-2-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR CDDL-1.0) AND ((GPL-2.0-only WITH Linux-syscall-note) OR Linux-OpenIB) AND ((GPL-2.0-only WITH Linux-syscall-note) OR MIT) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR MIT) AND BSD-3-Clause AND (GPL-1.0-or-later WITH Linux-syscall-note) AND GPL-2.0-only AND (GPL-2.0-only WITH Linux-syscall-note) AND (GPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.1-only WITH Linux-syscall-note) AND (LGPL-2.1-or-later WITH Linux-syscall-note) AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f889dccce5f81f4149c72806e43c1190"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-headers@7.2.0-61.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-srpm-macros-aarch64", "name": "kernel-srpm-macros", "versionInfo": "1.0-30.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/k/kernel-srpm-macros-1.0-30.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: d6fe851b8eed59b0b3ed90411974a3f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-srpm-macros@1.0-30.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-keyutils-libs-aarch64", "name": "keyutils-libs", "versionInfo": "1.6.3-8.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/k/keyutils-libs-1.6.3-8.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: d3b7e7b1223be819aef95669d2c4fe0e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/keyutils-libs@1.6.3-8.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-krb5-libs-aarch64", "name": "krb5-libs", "versionInfo": "1.22.2-10.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/k/krb5-libs-1.22.2-10.3.hum1.aarch64.rpm", "licenseDeclared": "Brian-Gladman-2-Clause AND BSD-2-Clause AND (BSD-2-Clause OR GPL-2.0-or-later) AND BSD-2-Clause-first-lines AND BSD-3-Clause AND BSD-4-Clause AND CMU-Mach-nodoc AND FSFULLRWD AND HPND AND HPND-export2-US AND HPND-export-US AND HPND-export-US-acknowledgement AND HPND-export-US-modify AND ISC AND MIT AND MIT-CMU AND OLDAP-2.8 AND OpenVision", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 1ca5cfa7ebc428c140efce4d74804015"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/krb5-libs@1.22.2-10.3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libacl-aarch64", "name": "libacl", "versionInfo": "2.4.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libacl-2.4.0-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9a7c25684f484750003d22bfc95ac6e6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libacl@2.4.0-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libarchive-aarch64", "name": "libarchive", "versionInfo": "3.8.9-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libarchive-3.8.9-2.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause AND FSFULLR AND GPL-2.0-or-later WITH Libtool-exception AND BSD-3-Clause AND FSFUL", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: c0ad6886a62c6973197b2228b23ec20f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libarchive@3.8.9-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libasan-aarch64", "name": "libasan", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libasan-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 25182d3ba6ea7a6d2272732b63410bb0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libasan@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libassuan-aarch64", "name": "libassuan", "versionInfo": "2.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libassuan-2.5.7-6.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: e4bd09b483f2710e919e8b121b8def5b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libassuan@2.5.7-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libatomic-aarch64", "name": "libatomic", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libatomic-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: b96959aff3608e7749fb10e2d07550a2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libatomic@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libattr-aarch64", "name": "libattr", "versionInfo": "2.6.0-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libattr-2.6.0-9.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: d1a9e2272f66b2470ddf103dccdbaa58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libattr@2.6.0-9.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libblkid-aarch64", "name": "libblkid", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libblkid-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 5c7b723d8212d39d56c0d0acb9080c1b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libblkid@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbrotli-aarch64", "name": "libbrotli", "versionInfo": "1.2.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libbrotli-1.2.0-6.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 869ed8881342af797e348cfbd48977db"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbrotli@1.2.0-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-ng-aarch64", "name": "libcap-ng", "versionInfo": "0.9.6-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcap-ng-0.9.6-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9d383300e9cc456fd95f72ae9b417c32"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap-ng@0.9.6-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-aarch64", "name": "libcap", "versionInfo": "2.78-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcap-2.78-2.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: e99edee512a85f0da32dac44637395a0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap@2.78-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcbor-aarch64", "name": "libcbor", "versionInfo": "0.14.0-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcbor-0.14.0-3.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: fa0be1d01e63778fbf1a7b130aecea58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcbor@0.14.0-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcom-err-aarch64", "name": "libcom_err", "versionInfo": "1.47.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcom_err-1.47.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: de7ad9514f9df324f82aa913badb893a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcom_err@1.47.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcurl-aarch64", "name": "libcurl", "versionInfo": "8.22.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libcurl-8.22.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: e29d913a076a037c83164d4cc34c9448"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcurl@8.22.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libeconf-aarch64", "name": "libeconf", "versionInfo": "0.7.9-4.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libeconf-0.7.9-4.2.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 415ebd06ff218a7848731dd8a12df71d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libeconf@0.7.9-4.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libevent-aarch64", "name": "libevent", "versionInfo": "2.1.13-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libevent-2.1.13-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND ISC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: e8b87c1794d95583f6cc214eb663e885"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libevent@2.1.13-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfdisk-aarch64", "name": "libfdisk", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libfdisk-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 5fd6813b6601248c9ee9a9b1756e4aa1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfdisk@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libffi-aarch64", "name": "libffi", "versionInfo": "3.8.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libffi-3.8.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "MIT AND CC-PDDC AND (GPL-3.0-or-later WITH Texinfo-exception)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: dc83882a4ffb09b4e5578776aa34fafa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libffi@3.8.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfido2-aarch64", "name": "libfido2", "versionInfo": "1.17.0-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libfido2-1.17.0-6.2.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 40ab484ed83832f7ef24688549227664"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfido2@1.17.0-6.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfsverity-aarch64", "name": "libfsverity", "versionInfo": "1.7-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libfsverity-1.7-4.1.hum1.aarch64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 08e4f68c1432f65fac30bcd58c12091e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfsverity@1.7-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcc-aarch64", "name": "libgcc", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgcc-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 67a485baa0d3fb4c0e71f3ba1df5f902"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcc@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcrypt-aarch64", "name": "libgcrypt", "versionInfo": "1.12.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgcrypt-1.12.4-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND (BSD-3-Clause OR GPL-2.0-only) AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later AND MIT-Modern-Variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: c5c2ac6cdd2c137b49767a001717c89d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcrypt@1.12.4-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgomp-aarch64", "name": "libgomp", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgomp-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 014e8fb82e2268ed7b74f11ce5a8b4eb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgomp@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgpg-error-aarch64", "name": "libgpg-error", "versionInfo": "1.61-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libgpg-error-1.61-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND (BSD-3-Clause OR LGPL-2.1-or-later) AND FSFULLR AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 204ebeaf74957a27cc2b160a94f0c79e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgpg-error@1.61-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libidn2-aarch64", "name": "libidn2", "versionInfo": "2.3.8-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libidn2-2.3.8-4.1.hum1.aarch64.rpm", "licenseDeclared": "(GPL-2.0-or-later OR LGPL-3.0-or-later) AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 376a3c90f89b82a907277d1af37c65cd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libidn2@2.3.8-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libksba-aarch64", "name": "libksba", "versionInfo": "1.8.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libksba-1.8.1-1.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND (LGPL-3.0-or-later OR GPL-2.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: d6a0dcf217b4639e44ee3774153fe5aa"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libksba@1.8.1-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-liblastlog2-aarch64", "name": "liblastlog2", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/liblastlog2-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: a7d655451f4570e65aa8f53042f5ecbb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/liblastlog2@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmount-aarch64", "name": "libmount", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libmount-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 28a418811acfed0034210aa6794e4742"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmount@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmpc-aarch64", "name": "libmpc", "versionInfo": "1.4.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libmpc-1.4.1-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-3.0-or-later AND FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 0153c23cb56f963b856d77e6606b46a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmpc@1.4.1-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp2-aarch64", "name": "libnghttp2", "versionInfo": "1.69.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libnghttp2-1.69.0-6.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: b2b0fab8908bbedc877ac938800f0385"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp2@1.69.0-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp3-aarch64", "name": "libnghttp3", "versionInfo": "1.18.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libnghttp3-1.18.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 731f3357d94b41124af945cecea7639e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp3@1.18.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpfm-aarch64", "name": "libpfm", "versionInfo": "4.13.0-20.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/aarch64/Packages/l/libpfm-4.13.0-20.fc44.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f67c59ebdcc2d13a01308d6b1d6e536c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpfm@4.13.0-20.fc44?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpkgconf-aarch64", "name": "libpkgconf", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libpkgconf-2.5.1-2.1.hum1.aarch64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 6a472459f25a886e09b755fd94506315"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpkgconf@2.5.1-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpsl-aarch64", "name": "libpsl", "versionInfo": "0.23.3-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libpsl-0.23.3-1.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: cafec3bb2c0a8c9008983d6ae8495d1e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpsl@0.23.3-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-utils-aarch64", "name": "libselinux-utils", "versionInfo": "3.11-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libselinux-utils-3.11-5.1.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: a086b73677bd9517a3b039ac5a432040"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux-utils@3.11-5.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-aarch64", "name": "libselinux", "versionInfo": "3.11-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libselinux-3.11-5.1.hum1.aarch64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 25520cb28213914e5586621a3e2d314b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux@3.11-5.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsemanage-aarch64", "name": "libsemanage", "versionInfo": "3.11-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libsemanage-3.11-4.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 09bc146f89eb39e1d401f83431ccccea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsemanage@3.11-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsepol-aarch64", "name": "libsepol", "versionInfo": "3.11-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libsepol-3.11-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 2cc6e52cce99fa8840bd0465e75a025c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsepol@3.11-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsmartcols-aarch64", "name": "libsmartcols", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libsmartcols-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 2d04c60be141e0254792ddf85c0e0cc0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsmartcols@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-config-aarch64", "name": "libssh-config", "versionInfo": "0.12.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libssh-config-0.12.2-1.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f26ba5abb68d2fea08f751a8569faa35"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh-config@0.12.2-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-aarch64", "name": "libssh", "versionInfo": "0.12.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libssh-0.12.2-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 08f9742c96d29f39defcebf4fd74b197"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh@0.12.2-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libstdc++-aarch64", "name": "libstdc++", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libstdc++-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: e725710c3409d1d4619730547f7449f8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libstdc++@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtasn1-aarch64", "name": "libtasn1", "versionInfo": "4.21.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libtasn1-4.21.0-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 14c7c1c97721bac561b7d5f8b5c0c39b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtasn1@4.21.0-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtool-ltdl-aarch64", "name": "libtool-ltdl", "versionInfo": "2.6.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libtool-ltdl-2.6.2-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later WITH Libtool-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9809b30f9c49849338a2498623dfb852"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtool-ltdl@2.6.2-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libubsan-aarch64", "name": "libubsan", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libubsan-16.2.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 5a41a411d481c8f52c4f75276408738e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libubsan@16.2.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libunistring-aarch64", "name": "libunistring", "versionInfo": "1.1-12.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libunistring-1.1-12.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: bf45761accca21784ca1db3f147e5757"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libunistring@1.1-12.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libusb1-aarch64", "name": "libusb1", "versionInfo": "1.0.30-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libusb1-1.0.30-2.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 85c533d18faa83223f25c27c52a93f10"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libusb1@1.0.30-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libuuid-aarch64", "name": "libuuid", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libuuid-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: aefcbbc685252be8d35e820024dcce0b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libuuid@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libverto-aarch64", "name": "libverto", "versionInfo": "0.3.2-13.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libverto-0.3.2-13.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 70ecf5a6823c71930b20e277c56238db"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libverto@0.3.2-13.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-devel-aarch64", "name": "libxcrypt-devel", "versionInfo": "4.5.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libxcrypt-devel-4.5.2-4.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 59b03056a000c26fb4c849049d75b60f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt-devel@4.5.2-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-aarch64", "name": "libxcrypt", "versionInfo": "4.5.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libxcrypt-4.5.2-4.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: db80a9643632ced837bc9a2cbaec27f3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt@4.5.2-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxml2-16-aarch64", "name": "libxml2-16", "versionInfo": "2.15.4-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libxml2-16-2.15.4-1.2.hum1.aarch64.rpm", "licenseDeclared": "MIT AND ISC-Veillard AND W3C", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 42dfa79f0ef5d6069cddea1de7c03068"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxml2-16@2.15.4-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libzstd-aarch64", "name": "libzstd", "versionInfo": "1.5.7-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/libzstd-1.5.7-6.2.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: b8aaeb5f120147f9830dc5f9d40bef28"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libzstd@1.5.7-6.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-linkdupes-aarch64", "name": "linkdupes", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/linkdupes-0.7.3-3.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 0f212d529c254829bbfdc3493bc10f32"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/linkdupes@0.7.3-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-libs-aarch64", "name": "lua-libs", "versionInfo": "5.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/lua-libs-5.5.1-2.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 29a8431add425bb28338079ae0399718"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-libs@5.5.1-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-srpm-macros-aarch64", "name": "lua-srpm-macros", "versionInfo": "1-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/lua-srpm-macros-1-18.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 68293f00751e1bc423b0bb2ac4e21221"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-srpm-macros@1-18.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lz4-libs-aarch64", "name": "lz4-libs", "versionInfo": "1.10.0-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/l/lz4-libs-1.10.0-5.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: ccee7d664e4a84d6aa511e3a26f93f9f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lz4-libs@1.10.0-5.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-make-aarch64", "name": "make", "versionInfo": "1:4.4.1-13.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/m/make-4.4.1-13.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND GFDL-1.3-or-later AND FSFULLR", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 5da3e1b32d2cebd830a2448f0f940ff3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/make@4.4.1-13.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-meson-srpm-macros-aarch64", "name": "meson-srpm-macros", "versionInfo": "1.12.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/m/meson-srpm-macros-1.12.1-2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 7617c98560a327b943961c400248f04b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/meson-srpm-macros@1.12.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpdecimal-aarch64", "name": "mpdecimal", "versionInfo": "4.0.1-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/m/mpdecimal-4.0.1-4.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 36ba815791916cccfd7c0d0c17792adc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpdecimal@4.0.1-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpfr-aarch64", "name": "mpfr", "versionInfo": "4.2.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/m/mpfr-4.2.2-4.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 0702e996cddee9453e51791dfdeb33df"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpfr@4.2.2-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-base-aarch64", "name": "ncurses-base", "versionInfo": "6.6-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/ncurses-base-6.6-3.1.hum1.noarch.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: a90d36a4f9603dffe4896cbc1c4c42c0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-base@6.6-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-libs-aarch64", "name": "ncurses-libs", "versionInfo": "6.6-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/ncurses-libs-6.6-3.1.hum1.aarch64.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: fa3c5788474bd14c1980e9f334fd1b6c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-libs@6.6-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nettle-aarch64", "name": "nettle", "versionInfo": "4.0-5.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/nettle-4.0-5.5.hum1.aarch64.rpm", "licenseDeclared": "LGPL-3.0-or-later OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 8485733d8b83283c746c07ccb4cd3fce"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nettle@4.0-5.5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-aarch64", "name": "ngtcp2-crypto-ossl", "versionInfo": "1.22.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/ngtcp2-crypto-ossl-1.22.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 7a6ca0d297c88673e5f88c76f501f7fc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2-crypto-ossl@1.22.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-aarch64", "name": "ngtcp2", "versionInfo": "1.22.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/ngtcp2-1.22.1-3.1.hum1.aarch64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: e6d8cfb25c0e2eb0ec02bfa93b7c67fe"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2@1.22.1-3.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-npth-aarch64", "name": "npth", "versionInfo": "1.8-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/n/npth-1.8-5.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9df021e664b3a2a9bd92cfbb1b829fcf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/npth@1.8-5.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-aarch64", "name": "ocaml-srpm-macros", "versionInfo": "11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/ocaml-srpm-macros-11-4.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 6d563b597c552c5ce842bdd83b6d8dd1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ocaml-srpm-macros@11-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openblas-srpm-macros-aarch64", "name": "openblas-srpm-macros", "versionInfo": "2-23.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openblas-srpm-macros-2-23.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: bf3a7ebbd05d3c09e9712e957b99d3b5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openblas-srpm-macros@2-23.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openldap-aarch64", "name": "openldap", "versionInfo": "2.6.15-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openldap-2.6.15-1.1.hum1.aarch64.rpm", "licenseDeclared": "OLDAP-2.8", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 7a0a38a30429c24b8ee796ace3fa72b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openldap@2.6.15-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-aarch64", "name": "openssl-fips-provider-upstream", "versionInfo": "1:3.5.9-0.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openssl-fips-provider-upstream-3.5.9-0.3.hum1.aarch64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 7d58b7603194e834c375f9794fc20ec3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-fips-provider-upstream@3.5.9-0.3.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-libs-aarch64", "name": "openssl-libs", "versionInfo": "1:3.5.9-0.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/o/openssl-libs-3.5.9-0.3.hum1.aarch64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 0bf0c50423ec91bf21a25ad8a5ad2344"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.5.9-0.3.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-trust-aarch64", "name": "p11-kit-trust", "versionInfo": "0.26.5-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/p11-kit-trust-0.26.5-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 4cbcde19716630f9edfd16711c3fcf51"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit-trust@0.26.5-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-aarch64", "name": "p11-kit", "versionInfo": "0.26.5-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/p11-kit-0.26.5-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 5f499f9cb33f1d850fd44ddd83f6fd67"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit@0.26.5-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-aarch64", "name": "package-notes-srpm-macros", "versionInfo": "0.20-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/package-notes-srpm-macros-0.20-2.hum1.noarch.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 4f6f48e6009eb2455ec194f477f9b058"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/package-notes-srpm-macros@0.20-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-libs-aarch64", "name": "pam-libs", "versionInfo": "1.7.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pam-libs-1.7.2-4.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 0817accdede3b6812ccb3569a779a6d8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam-libs@1.7.2-4.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-patch-aarch64", "name": "patch", "versionInfo": "2.8-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/patch-2.8-6.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 910596093cdbbae37d1239e3cda57bde"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/patch@2.8-6.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-syntax-aarch64", "name": "pcre2-syntax", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pcre2-syntax-10.49-0.2.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 5892ce77122ec3ecfec34fe8679d2737"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-syntax@10.49-0.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-aarch64", "name": "pcre2", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pcre2-10.49-0.2.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 622d6d1f1739dc65c97a7364e8a36f54"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2@10.49-0.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-perl-srpm-macros-aarch64", "name": "perl-srpm-macros", "versionInfo": "1-65.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/perl-srpm-macros-1-65.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 0f8b16c4e63430bcff87cb49fa941740"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/perl-srpm-macros@1-65.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-m4-aarch64", "name": "pkgconf-m4", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pkgconf-m4-2.5.1-2.1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 2ee038a201817d6d825292dc25c6b873"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-m4@2.5.1-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-aarch64", "name": "pkgconf-pkg-config", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pkgconf-pkg-config-2.5.1-2.1.hum1.aarch64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 194d02d87ca34faf276f41dc542e7cfb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-pkg-config@2.5.1-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-aarch64", "name": "pkgconf", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pkgconf-2.5.1-2.1.hum1.aarch64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 390abfa946645d0fa5872ec37b6fff03"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf@2.5.1-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-policycoreutils-aarch64", "name": "policycoreutils", "versionInfo": "3.11-2.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/policycoreutils-3.11-2.3.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f29476a3edf8d66a1a2681c976ea4306"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/policycoreutils@3.11-2.3.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-popt-aarch64", "name": "popt", "versionInfo": "1.19-11.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/popt-1.19-11.2.hum1.aarch64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: a59267807d08c6f2f57cd3504fe46e1b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/popt@1.19-11.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-aarch64", "name": "publicsuffix-list-dafsa", "versionInfo": "20260624-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/publicsuffix-list-dafsa-20260624-2.1.hum1.noarch.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 258b22e06326223e99678d8138bba57d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/publicsuffix-list-dafsa@20260624-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-aarch64", "name": "pyproject-srpm-macros", "versionInfo": "1.23.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/pyproject-srpm-macros-1.23.2-1.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: e82edc55e5be2f520af44c2b0337e92a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pyproject-srpm-macros@1.23.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-pip-wheel-aarch64", "name": "python-pip-wheel", "versionInfo": "26.2-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python-pip-wheel-26.2-0.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND Python-2.0.1 AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MPL-2.0 AND (Apache-2.0 OR BSD-2-Clause)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 30b1136e6baf2dc70c7e01a45cf96050"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-pip-wheel@26.2-0.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-srpm-macros-aarch64", "name": "python-srpm-macros", "versionInfo": "3.14-12.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python-srpm-macros-3.14-12.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND PSF-2.0 AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 618d0c006548a702f22df8ec49dca3a5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-srpm-macros@3.14-12.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-boolean.py-aarch64", "name": "python3-boolean.py", "versionInfo": "5.0-10.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/aarch64/os/Packages/p/python3-boolean.py-5.0-10.fc44.noarch.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: b7af00dcc3668fd56d3b09f1f1b171a9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-boolean.py@5.0-10.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-libs-aarch64", "name": "python3-libs", "versionInfo": "3.14.8-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python3-libs-3.14.8-1.1.hum1.aarch64.rpm", "licenseDeclared": "Python-2.0.1 AND MIT AND BSD-3-Clause AND MIT-CMU AND HPND-SMC AND BSD-2-Clause AND dtoa AND Unicode-3.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 49ec99ea0399105d541434d8d38f18da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-libs@3.14.8-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-license-expression-aarch64", "name": "python3-license-expression", "versionInfo": "30.4.4-4.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/aarch64/os/Packages/p/python3-license-expression-30.4.4-4.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 009ffab3cc792b96ce398d6c97aa5a0a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-license-expression@30.4.4-4.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-aarch64", "name": "python3", "versionInfo": "3.14.8-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/p/python3-3.14.8-1.1.hum1.aarch64.rpm", "licenseDeclared": "Python-2.0.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 18ffabe8c4f4771f14d1a2dbca1a79fe"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3@3.14.8-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt5-srpm-macros-aarch64", "name": "qt5-srpm-macros", "versionInfo": "5.15.18-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/q/qt5-srpm-macros-5.15.18-3.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 4ffb52b3bdf4017e6c58f49b621e1c54"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt5-srpm-macros@5.15.18-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt6-srpm-macros-aarch64", "name": "qt6-srpm-macros", "versionInfo": "6.11.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/q/qt6-srpm-macros-6.11.2-1.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 8478ebf3654d031de2c0964fb1f5d8a2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt6-srpm-macros@6.11.2-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-readline-aarch64", "name": "readline", "versionInfo": "8.3-7.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/readline-8.3-7.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 53feb6b9f0049bf2784fa793f91a2910"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/readline@8.3-7.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-redhat-rpm-config-aarch64", "name": "redhat-rpm-config", "versionInfo": "345-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/redhat-rpm-config-345-4.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9e9b9de801d40d8b16d77058da82cde9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/redhat-rpm-config@345-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-libs-aarch64", "name": "rpm-build-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-build-libs-6.1.0-1.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 4262ef24ddbef7bb949209d16e4630d5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build-libs@6.1.0-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-aarch64", "name": "rpm-build", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-build-6.1.0-1.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 08a854828dea1b4a5738d93cbe23ea7c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build@6.1.0-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-libs-aarch64", "name": "rpm-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-libs-6.1.0-1.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f3a2dbc2d4e31759c79c7d665daa59a5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-libs@6.1.0-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-aarch64", "name": "rpm-plugin-selinux", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-plugin-selinux-6.1.0-1.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 3aa7f0b11ef4d932edf55fa41f2a2b95"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-plugin-selinux@6.1.0-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sequoia-aarch64", "name": "rpm-sequoia", "versionInfo": "1.10.1.1-1.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-sequoia-1.10.1.1-1.5.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.0-or-later AND Apache-2.0 AND BSL-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 1b48403219c7366b55923e38b4f53df4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sequoia@1.10.1.1-1.5.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sign-libs-aarch64", "name": "rpm-sign-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-sign-libs-6.1.0-1.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: eb5c1682e184f95275ab6d0859b29798"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sign-libs@6.1.0-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-aarch64", "name": "rpm", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rpm-6.1.0-1.2.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 56834dc918edb7e3620729c2a4b9d7bc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm@6.1.0-1.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rust-srpm-macros-aarch64", "name": "rust-srpm-macros", "versionInfo": "28.5-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/r/rust-srpm-macros-28.5-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 606a7a2166723ba0e3515fa8244596dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rust-srpm-macros@28.5-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sed-aarch64", "name": "sed", "versionInfo": "4.10-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/sed-4.10-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 3d32547783b16324bc14edaa05196fa0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sed@4.10-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-targeted-aarch64", "name": "selinux-policy-targeted", "versionInfo": "45.21-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/selinux-policy-targeted-45.21-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: afd3a0e6066718b6633918ff5031c1ce"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy-targeted@45.21-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-aarch64", "name": "selinux-policy", "versionInfo": "45.21-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/selinux-policy-45.21-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 910958d9c5c1913d447a1e64fb0ad0b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy@45.21-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-setup-aarch64", "name": "setup", "versionInfo": "2.15.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/setup-2.15.1-2.1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 7306efa4649c49f3d249269ae6781e58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/setup@2.15.1-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-aarch64", "name": "shadow-utils", "versionInfo": "2:4.20.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/shadow-utils-4.20.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 2e89cf130885f48a35b69f11f4949c38"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils@4.20.0-1.1.hum1?arch=aarch64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-libs-aarch64", "name": "sqlite-libs", "versionInfo": "3.54.0-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/sqlite-libs-3.54.0-0.1.hum1.aarch64.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 07e9e3c90b4ca4ef550b8b5b4115e5c0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite-libs@3.54.0-0.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-libs-aarch64", "name": "systemd-libs", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/systemd-libs-261.2-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 70d8146669255ba05ce2f1f4569a53ea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-libs@261.2-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-aarch64", "name": "systemd-standalone-sysusers", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/s/systemd-standalone-sysusers-261.2-1.1.hum1.aarch64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: c1d8fb208e84a77c514da417404b8f0b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-standalone-sysusers@261.2-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tar-aarch64", "name": "tar", "versionInfo": "2:1.35-10.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/t/tar-1.35-10.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 4e587755d33c8d0282c9c40fc74c0f79"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tar@1.35-10.1.hum1?arch=aarch64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tpm2-tss-aarch64", "name": "tpm2-tss", "versionInfo": "4.2.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/t/tpm2-tss-4.2.0-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9ffd7ed639cb171e2130e301bcefd292"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tpm2-tss@4.2.0-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-aarch64", "name": "tree-sitter-srpm-macros", "versionInfo": "0.4.6-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/t/tree-sitter-srpm-macros-0.4.6-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f65af17df28df341ec383338fcc47481"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tree-sitter-srpm-macros@0.4.6-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tzdata-aarch64", "name": "tzdata", "versionInfo": "2026e-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/t/tzdata-2026e-1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain AND (GPL-2.0-only WITH ClassPath-exception-2.0)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: a1336045dee9a14e5ecb98f2e75ca023"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tzdata@2026e-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-unzip-aarch64", "name": "unzip", "versionInfo": "6.0-71.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/u/unzip-6.0-71.1.hum1.aarch64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 87ad5c5b51db9c1f6fa9c96637ffd252"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/unzip@6.0-71.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-core-aarch64", "name": "util-linux-core", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/u/util-linux-core-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: fc17431aba800b112050d86c4f27804b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux-core@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-aarch64", "name": "util-linux", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/u/util-linux-2.42.4-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 87a04208a28df627928b6ffdc49da18a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux@2.42.4-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-which-aarch64", "name": "which", "versionInfo": "2.25-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/w/which-2.25-2.1.hum1.aarch64.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 3acbde8cc3977af8ce2112397cde2817"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/which@2.25-2.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xxhash-libs-aarch64", "name": "xxhash-libs", "versionInfo": "0.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/x/xxhash-libs-0.8.4-1.1.hum1.aarch64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 94a4e68282f894848dfcd600c156394a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xxhash-libs@0.8.4-1.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-libs-aarch64", "name": "xz-libs", "versionInfo": "1:5.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/x/xz-libs-5.8.4-1.1.hum1.aarch64.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 712ddac4015f3e0a52a2b3f765e8e191"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz-libs@5.8.4-1.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-aarch64", "name": "xz", "versionInfo": "1:5.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/x/xz-5.8.4-1.1.hum1.aarch64.rpm", "licenseDeclared": "0BSD AND GPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: db94e077cd214b5c423f7b4c59622c14"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz@5.8.4-1.1.hum1?arch=aarch64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zig-srpm-macros-aarch64", "name": "zig-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zig-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 0c226eb1fa4d5fc3d272055b6397b077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zig-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zip-aarch64", "name": "zip", "versionInfo": "3.0-46.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zip-3.0-46.1.hum1.aarch64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 901de5c8acb50bc2000cc1ff85afa11a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zip@3.0-46.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zlib-ng-compat-aarch64", "name": "zlib-ng-compat", "versionInfo": "2.3.3-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zlib-ng-compat-2.3.3-6.1.hum1.aarch64.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 06962c93fec8b49e0c12e23e7154ded4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zlib-ng-compat@2.3.3-6.1.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zstd-aarch64", "name": "zstd", "versionInfo": "1.5.7-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/aarch64/Packages/z/zstd-1.5.7-6.2.hum1.aarch64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 0537b67afcf0c266515477de756f6dee"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zstd@1.5.7-6.2.hum1?arch=aarch64"}]}, {"SPDXID": "SPDXRef-Buildroot-syft-s390x", "name": "syft-buildroot-s390x", "versionInfo": "1b5c597e", "downloadLocation": "NOASSERTION", "filesAnalyzed": false}, {"SPDXID": "SPDXRef-Buildroot-Package-R-srpm-macros-s390x", "name": "R-srpm-macros", "versionInfo": "1.3.7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/R-srpm-macros-1.3.7-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: af95299e83e51b62a40fa7a42d357077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/R-srpm-macros@1.3.7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-add-determinism-s390x", "name": "add-determinism", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/a/add-determinism-0.7.3-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: ef237928cb1bc6d180183d4f2ea933da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/add-determinism@0.7.3-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-alternatives-s390x", "name": "alternatives", "versionInfo": "1.33-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/a/alternatives-1.33-6.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 8c032a32d77cea45153f36640ad59a1e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/alternatives@1.33-6.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-docs-s390x", "name": "annobin-docs", "versionInfo": "13.32-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/a/annobin-docs-13.32-1.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 18d60a72e7a0be13693c92c6e0d885c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-docs@13.32-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-s390x", "name": "annobin-plugin-gcc", "versionInfo": "13.32-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/a/annobin-plugin-gcc-13.32-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: c2981c7ef3c6275bbfe316b04a4705e3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-plugin-gcc@13.32-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ansible-srpm-macros-s390x", "name": "ansible-srpm-macros", "versionInfo": "1-22.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/a/ansible-srpm-macros-1-22.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 6343ff368e5236625d015dbc91e70769"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ansible-srpm-macros@1-22.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-askalono-cli-s390x", "name": "askalono-cli", "versionInfo": "0.5.0-4.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/releases/44/Everything/s390x/os/Packages/a/askalono-cli-0.5.0-4.fc44.s390x.rpm", "licenseDeclared": "Apache-2.0 AND CC0-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR BSL-1.0) AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f3b6a225d693b4eaf4215d1c8286cc57"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/askalono-cli@0.5.0-4.fc44?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-audit-libs-s390x", "name": "audit-libs", "versionInfo": "4.2.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/a/audit-libs-4.2.1-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: b3d73496d23c446bac22a36930e8bf25"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/audit-libs@4.2.1-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bash-s390x", "name": "bash", "versionInfo": "5.3.20-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/b/bash-5.3.20-1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f0cc885ec126817b70443273e779f324"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bash@5.3.20-1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-binutils-s390x", "name": "binutils", "versionInfo": "2.46.1-1.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/b/binutils-2.46.1-1.3.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH Bison-exception-2.2) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND BSD-3-Clause AND GFDL-1.3-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 01d2db020c2738eb1fc6d20bb1ac387a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/binutils@2.46.1-1.3.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-s390x", "name": "build-reproducibility-srpm-macros", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/b/build-reproducibility-srpm-macros-0.7.3-3.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 4dea8bdbe97b4534f60d8a6d0b9c793c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/build-reproducibility-srpm-macros@0.7.3-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-libs-s390x", "name": "bzip2-libs", "versionInfo": "1.0.8-24.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/b/bzip2-libs-1.0.8-24.1.hum1.s390x.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: de07601087c4eb722dcb0971aaa6fbea"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2-libs@1.0.8-24.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-s390x", "name": "bzip2", "versionInfo": "1.0.8-24.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/b/bzip2-1.0.8-24.1.hum1.s390x.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: df662eeb30bc1dc3f0647b081dc96498"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2@1.0.8-24.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ca-certificates-s390x", "name": "ca-certificates", "versionInfo": "2026.2.90_v9.0.317-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/ca-certificates-2026.2.90_v9.0.317-1.1.hum1.noarch.rpm", "licenseDeclared": "MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: a195cd97c3daf258791a89c2b5af39d2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ca-certificates@2026.2.90_v9.0.317-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cmake-srpm-macros-s390x", "name": "cmake-srpm-macros", "versionInfo": "4.3.0-5.6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/cmake-srpm-macros-4.3.0-5.6.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-open-group AND Zlib AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: e2f14e03350d92477884a522df888c53"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cmake-srpm-macros@4.3.0-5.6.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-common-s390x", "name": "coreutils-common", "versionInfo": "9.12-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/coreutils-common-9.12-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: ca1ea021eaf98e265d862c5e006b9b28"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils-common@9.12-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-s390x", "name": "coreutils", "versionInfo": "9.12-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/coreutils-9.12-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 125a9c8661c2a4b1ae3cdca1e9773553"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils@9.12-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpio-s390x", "name": "cpio", "versionInfo": "2.15-10.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/cpio-2.15-10.2.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 320683292765c2b9e194d914e1467b02"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpio@2.15-10.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpp-s390x", "name": "cpp", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/cpp-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9ffd80ab81d488b07f159598e610a683"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpp@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-config-default-s390x", "name": "crypto-policies-config-default", "versionInfo": "20260812-1.git359ab16.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/crypto-policies-config-default-20260812-1.git359ab16.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 1e6fce169a2973e4f665428cb52ae9ad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies-config-default@20260812-1.git359ab16.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-s390x", "name": "crypto-policies", "versionInfo": "20260812-1.git359ab16.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/crypto-policies-20260812-1.git359ab16.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9756d9b800cfeafa3f39e494328a620e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies@20260812-1.git359ab16.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-curl-s390x", "name": "curl", "versionInfo": "8.22.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/curl-8.22.0-1.1.hum1.s390x.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 5b4faa6ce7e8c0fcb895a62f9fd50cde"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/curl@8.22.0-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-s390x", "name": "cyrus-sasl-lib", "versionInfo": "2.1.28-37.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/c/cyrus-sasl-lib-2.1.28-37.2.hum1.s390x.rpm", "licenseDeclared": "BSD-Attribution-HPND-disclaimer", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: b8c311ffd73582f8a5ee475b0f6a5aad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cyrus-sasl-lib@2.1.28-37.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-debugedit-s390x", "name": "debugedit", "versionInfo": "5.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/d/debugedit-5.3-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 7ce0d08f82624617a229c20106310c56"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/debugedit@5.3-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-diffutils-s390x", "name": "diffutils", "versionInfo": "3.12-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/d/diffutils-3.12-6.2.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 833a118082d70b4cc23d82b506975341"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/diffutils@3.12-6.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-dwz-s390x", "name": "dwz", "versionInfo": "0.17-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/d/dwz-0.17-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND GPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 39608f83a2b2566a2fd28664b3f167a7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dwz@0.17-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ed-s390x", "name": "ed", "versionInfo": "1.22.6-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/e/ed-1.22.6-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-only AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9689ad8a7bf1baf643da266932d78301"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ed@1.22.6-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-efi-srpm-macros-s390x", "name": "efi-srpm-macros", "versionInfo": "6-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/e/efi-srpm-macros-6-9.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: cba49c2554beb37df9cc6bb744737e2b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/efi-srpm-macros@6-9.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-s390x", "name": "elfutils-debuginfod-client", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/e/elfutils-debuginfod-client-0.196-1.1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: edf1d7f609d4a899c31d06eaa2536e7d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-debuginfod-client@0.196-1.1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libelf-s390x", "name": "elfutils-libelf", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/e/elfutils-libelf-0.196-1.1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: c5fd8893c9ef89a8725e9990f060ed3a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libelf@0.196-1.1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libs-s390x", "name": "elfutils-libs", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/e/elfutils-libs-0.196-1.1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 4bd7efde617708ec5b2dea0dec41a3d1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libs@0.196-1.1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-s390x", "name": "elfutils", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/e/elfutils-0.196-1.1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later) AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: edc55be4985a5706252e40802deeedfb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils@0.196-1.1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-erlang-srpm-macros-s390x", "name": "erlang-srpm-macros", "versionInfo": "0.3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/e/erlang-srpm-macros-0.3.11-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 063020bc2b254fec865c06f313930cec"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/erlang-srpm-macros@0.3.11-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-expat-s390x", "name": "expat", "versionInfo": "2.8.5-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/e/expat-2.8.5-1.2.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 059049bbec0de1d63e937fdda5fd572a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/expat@2.8.5-1.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-libs-s390x", "name": "file-libs", "versionInfo": "5.48-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/f/file-libs-5.48-3.1.hum1.s390x.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 33857bdaf6d7d005ee71155a1a5ca9d2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file-libs@5.48-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-s390x", "name": "filesystem-srpm-macros", "versionInfo": "3.18-59.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/f/filesystem-srpm-macros-3.18-59.1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: cff1a42588f4eb1a758735b668069a67"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem-srpm-macros@3.18-59.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-s390x", "name": "filesystem", "versionInfo": "3.18-59.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/f/filesystem-3.18-59.1.hum1.s390x.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: d0b8d5222fccbf85251856cf3dc1f93a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem@3.18-59.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-s390x", "name": "file", "versionInfo": "5.48-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/f/file-5.48-3.1.hum1.s390x.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: dccc8e9259bf806446e1dbfac59f5a52"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file@5.48-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-findutils-s390x", "name": "findutils", "versionInfo": "1:4.11.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/f/findutils-4.11.0-2.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 5c745a203687e3ebcfc0a1f170f8a7c3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/findutils@4.11.0-2.1.hum1?arch=s390x&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fonts-srpm-macros-s390x", "name": "fonts-srpm-macros", "versionInfo": "1:5.0.0-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/f/fonts-srpm-macros-5.0.0-4.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 72e451571f24737949a256d091508d0c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fonts-srpm-macros@5.0.0-4.hum1?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-forge-srpm-macros-s390x", "name": "forge-srpm-macros", "versionInfo": "0.4.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/f/forge-srpm-macros-0.4.0-5.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: bfbed65969ec708556df3750591a377d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/forge-srpm-macros@0.4.0-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fpc-srpm-macros-s390x", "name": "fpc-srpm-macros", "versionInfo": "1.3-17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/f/fpc-srpm-macros-1.3-17.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 1f7e4cb902ccc37236f8d34ff8873cf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fpc-srpm-macros@1.3-17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gap-srpm-macros-s390x", "name": "gap-srpm-macros", "versionInfo": "2-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gap-srpm-macros-2-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 70e3423696085d13791fefc0be7cdf15"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gap-srpm-macros@2-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gawk-s390x", "name": "gawk", "versionInfo": "5.4.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gawk-5.4.1-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f62b6f1060564ddadc8a6d8b38bdced1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gawk@5.4.1-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-s390x", "name": "gcc-plugin-annobin", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gcc-plugin-annobin-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 768767978c834cc04dead07bab328f69"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc-plugin-annobin@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-s390x", "name": "gcc", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gcc-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: a8f6736c45d3cd00aea31f9f50a44786"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdb-minimal-s390x", "name": "gdb-minimal", "versionInfo": "17.2-4.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/updates/44/Everything/s390x/Packages/g/gdb-minimal-17.2-4.fc44.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 705692552ef65f3e1ee98c2d999ec5d3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdb-minimal@17.2-4.fc44?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdbm-libs-s390x", "name": "gdbm-libs", "versionInfo": "1:1.26-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gdbm-libs-1.26-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 212fc20a38ea2074ee36a62fbf7f2f62"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdbm-libs@1.26-1.1.hum1?arch=s390x&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ghc-srpm-macros-s390x", "name": "ghc-srpm-macros", "versionInfo": "1.10-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/ghc-srpm-macros-1.10-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: c59363c566e4f370953f5f4b048e594e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ghc-srpm-macros@1.10-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-common-s390x", "name": "glibc-common", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/glibc-common-2.43-9.2.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: a8dea3c606ec6891265a77017aece063"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-common@2.43-9.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-devel-s390x", "name": "glibc-devel", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/glibc-devel-2.43-9.2.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 75a543cbb69964f1f02926ccce9fa1cb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-devel@2.43-9.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-gconv-extra-s390x", "name": "glibc-gconv-extra", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/glibc-gconv-extra-2.43-9.2.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 5cbdda59f2c164e806865d4a30e07eab"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-gconv-extra@2.43-9.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-s390x", "name": "glibc-minimal-langpack", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/glibc-minimal-langpack-2.43-9.2.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: cc1a51d0faaecc7eac98cdf1ee613134"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-minimal-langpack@2.43-9.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-s390x", "name": "glibc", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/glibc-2.43-9.2.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 52dfafc55e889e2d8a2dac9245ab0068"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc@2.43-9.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gmp-s390x", "name": "gmp", "versionInfo": "1:6.3.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gmp-6.3.0-6.1.hum1.s390x.rpm", "licenseDeclared": "(LGPL-3.0-or-later OR GPL-2.0-or-later OR (LGPL-3.0-or-later AND GPL-2.0-or-later)) AND GFDL-1.3-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9e9c7bef27b1f9c662c8064f6fed47c7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gmp@6.3.0-6.1.hum1?arch=s390x&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnat-srpm-macros-s390x", "name": "gnat-srpm-macros", "versionInfo": "7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnat-srpm-macros-7-3.hum1.noarch.rpm", "licenseDeclared": "FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 66efb6ab04e5e1a84478a688e2f149a3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnat-srpm-macros@7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnome-srpm-macros-s390x", "name": "gnome-srpm-macros", "versionInfo": "1.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/updates/44/Everything/s390x/Packages/g/gnome-srpm-macros-1.0-1.fc44.noarch.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 2bbaa6afcb861d76b0036e4b5bf9b3be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnome-srpm-macros@1.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnulib-l10n-s390x", "name": "gnulib-l10n", "versionInfo": "20241231-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnulib-l10n-20241231-4.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 5628836ab4d4e824bcadb20d87a01a33"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnulib-l10n@20241231-4.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-s390x", "name": "gnupg2-dirmngr", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnupg2-dirmngr-2.4.9-18.2.hum1.s390x.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: d101e0fe84237b495788851e8eea6236"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-dirmngr@2.4.9-18.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-s390x", "name": "gnupg2-gpg-agent", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnupg2-gpg-agent-2.4.9-18.2.hum1.s390x.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: c3d01adde2cdc888413588f5b899e37c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpg-agent@2.4.9-18.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-s390x", "name": "gnupg2-gpgconf", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnupg2-gpgconf-2.4.9-18.2.hum1.s390x.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: a7e2b966cd08292e56bec3ef01b91333"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpgconf@2.4.9-18.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-s390x", "name": "gnupg2-keyboxd", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnupg2-keyboxd-2.4.9-18.2.hum1.s390x.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 39fc1144a8716d29aec25a61af031790"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-keyboxd@2.4.9-18.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-verify-s390x", "name": "gnupg2-verify", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnupg2-verify-2.4.9-18.2.hum1.s390x.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 55bcec1291392bc641bd9160eafb60ab"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-verify@2.4.9-18.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-s390x", "name": "gnupg2", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnupg2-2.4.9-18.2.hum1.s390x.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 7fe21b8ec6f4bdbcff1a9f273668375c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2@2.4.9-18.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnutls-s390x", "name": "gnutls", "versionInfo": "3.8.13-5.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gnutls-3.8.13-5.2.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 8df51fe97148aac97285db2527c6b27c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnutls@3.8.13-5.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-filesystem-s390x", "name": "go-filesystem", "versionInfo": "3.8.0-2.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/releases/44/Everything/s390x/os/Packages/g/go-filesystem-3.8.0-2.fc44.s390x.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: c0e14cfe7efe84aa2eeadac34b45b086"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-filesystem@3.8.0-2.fc44?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-rpm-macros-s390x", "name": "go-rpm-macros", "versionInfo": "3.8.0-2.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/releases/44/Everything/s390x/os/Packages/g/go-rpm-macros-3.8.0-2.fc44.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: c598c878bf7aec955ff55511e766215a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-rpm-macros@3.8.0-2.fc44?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-srpm-macros-s390x", "name": "go-srpm-macros", "versionInfo": "3.8.0-2.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/releases/44/Everything/s390x/os/Packages/g/go-srpm-macros-3.8.0-2.fc44.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 6f0b3791a6d27bf3a0297bd5d9133203"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-srpm-macros@3.8.0-2.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-vendor-tools-s390x", "name": "go-vendor-tools", "versionInfo": "0.12.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/updates/44/Everything/s390x/Packages/g/go-vendor-tools-0.12.0-1.fc44.noarch.rpm", "licenseDeclared": "MIT AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 7c4ed6389413dbed713121b1168f24da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-vendor-tools@0.12.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-bin-s390x", "name": "golang1.27-bin", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/golang1.27-bin-1.27.2-1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: e6a920d4eb2b33fcb2475d86a4b28401"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-bin@1.27.2-1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-src-s390x", "name": "golang1.27-src", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/golang1.27-src-1.27.2-1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f40c9e87cab011209fed012b75f85d64"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-src@1.27.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-s390x", "name": "golang1.27", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/golang1.27-1.27.2-1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 46513f6da828743f955dd01c4e4048e3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27@1.27.2-1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golist-s390x", "name": "golist", "versionInfo": "0.10.4-11.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/releases/44/Everything/s390x/os/Packages/g/golist-0.10.4-11.fc44.s390x.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 33a730e9c0e05ea94958b3e133ad96e7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golist@0.10.4-11.fc44?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgverify-s390x", "name": "gpgverify", "versionInfo": "2.2-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gpgverify-2.2-5.hum1.noarch.rpm", "licenseDeclared": "Boehm-GC", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9637bdca60814388d4c5b144d923e6d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgverify@2.2-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-grep-s390x", "name": "grep", "versionInfo": "3.12-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/grep-3.12-4.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: be302c3fba90b6802d063da201229aba"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grep@3.12-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gzip-s390x", "name": "gzip", "versionInfo": "1.15-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/g/gzip-1.15-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: e975013a39c5a3abacf0746083cb2a3f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gzip@1.15-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-s390x", "name": "hummingbird-gpg-keys", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/h/hummingbird-gpg-keys-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 01a73721cc0ecdcb5d9f3929f6777157"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-gpg-keys@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-release-s390x", "name": "hummingbird-release", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/h/hummingbird-release-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: d1c993eba75002797ea72c3cd1266853"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-release@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-repos-s390x", "name": "hummingbird-repos", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/h/hummingbird-repos-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 1704eb0434ddab68e1c756070246f576"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-repos@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-s390x", "name": "ima-evm-utils-libs", "versionInfo": "1.6.2-12.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/i/ima-evm-utils-libs-1.6.2-12.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 39381b73d7f0bf0b47d0f43e2553085b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ima-evm-utils-libs@1.6.2-12.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-info-s390x", "name": "info", "versionInfo": "7.2-9.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/releases/44/Everything/s390x/os/Packages/i/info-7.2-9.fc44.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: fff27099388f98905cc71156882366f9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/info@7.2-9.fc44?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jansson-s390x", "name": "jansson", "versionInfo": "2.14-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/j/jansson-2.14-5.1.hum1.s390x.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 552c8b09d6f785ebe3ecf37d2a97b709"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jansson@2.14-5.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-srpm-macros-s390x", "name": "java-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/j/java-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT-0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 367fafb59cbd6a02034ba8bafdafe9c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-json-c-s390x", "name": "json-c", "versionInfo": "0.18-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/j/json-c-0.18-9.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 8d14ce4c56a1c08cec53088767d4424c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/json-c@0.18-9.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-headers-s390x", "name": "kernel-headers", "versionInfo": "7.2.0-61.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/k/kernel-headers-7.2.0-61.1.hum1.s390x.rpm", "licenseDeclared": "((GPL-2.0-only WITH Linux-syscall-note) OR BSD-2-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR CDDL-1.0) AND ((GPL-2.0-only WITH Linux-syscall-note) OR Linux-OpenIB) AND ((GPL-2.0-only WITH Linux-syscall-note) OR MIT) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR MIT) AND BSD-3-Clause AND (GPL-1.0-or-later WITH Linux-syscall-note) AND GPL-2.0-only AND (GPL-2.0-only WITH Linux-syscall-note) AND (GPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.1-only WITH Linux-syscall-note) AND (LGPL-2.1-or-later WITH Linux-syscall-note) AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 116d73f463cd21f533e34ba97a2011de"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-headers@7.2.0-61.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-srpm-macros-s390x", "name": "kernel-srpm-macros", "versionInfo": "1.0-30.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/k/kernel-srpm-macros-1.0-30.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: d6fe851b8eed59b0b3ed90411974a3f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-srpm-macros@1.0-30.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-keyutils-libs-s390x", "name": "keyutils-libs", "versionInfo": "1.6.3-8.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/k/keyutils-libs-1.6.3-8.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 76a1051bcc56312b436407503fd6a16e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/keyutils-libs@1.6.3-8.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-krb5-libs-s390x", "name": "krb5-libs", "versionInfo": "1.22.2-10.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/k/krb5-libs-1.22.2-10.3.hum1.s390x.rpm", "licenseDeclared": "Brian-Gladman-2-Clause AND BSD-2-Clause AND (BSD-2-Clause OR GPL-2.0-or-later) AND BSD-2-Clause-first-lines AND BSD-3-Clause AND BSD-4-Clause AND CMU-Mach-nodoc AND FSFULLRWD AND HPND AND HPND-export2-US AND HPND-export-US AND HPND-export-US-acknowledgement AND HPND-export-US-modify AND ISC AND MIT AND MIT-CMU AND OLDAP-2.8 AND OpenVision", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 5ead3540a46eeab91cdeba262d8b04ae"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/krb5-libs@1.22.2-10.3.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libacl-s390x", "name": "libacl", "versionInfo": "2.4.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libacl-2.4.0-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9bfd8102f8671689a86d2afeb0169efc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libacl@2.4.0-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libarchive-s390x", "name": "libarchive", "versionInfo": "3.8.9-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libarchive-3.8.9-2.1.hum1.s390x.rpm", "licenseDeclared": "BSD-2-Clause AND FSFULLR AND GPL-2.0-or-later WITH Libtool-exception AND BSD-3-Clause AND FSFUL", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 813096ea6994141a774ae73f5dfb54bf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libarchive@3.8.9-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libasan-s390x", "name": "libasan", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libasan-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 7aa5b365b15f58604609f7538938d8c2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libasan@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libassuan-s390x", "name": "libassuan", "versionInfo": "2.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libassuan-2.5.7-6.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 4562a9a9f17335e55b18d88835ef5f07"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libassuan@2.5.7-6.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libatomic-s390x", "name": "libatomic", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libatomic-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 6376aafb0a9925918e64aa80b4ed35ab"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libatomic@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libattr-s390x", "name": "libattr", "versionInfo": "2.6.0-2.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libattr-2.6.0-2.2.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: bd5a29f86127e125b4675f2e23ca8ef8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libattr@2.6.0-2.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libblkid-s390x", "name": "libblkid", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libblkid-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 44fc0311a5d308711efa28535704e4a7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libblkid@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbrotli-s390x", "name": "libbrotli", "versionInfo": "1.2.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libbrotli-1.2.0-6.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: a864079840107557972998cffe7fedd9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbrotli@1.2.0-6.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-ng-s390x", "name": "libcap-ng", "versionInfo": "0.9.6-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libcap-ng-0.9.6-1.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 142580b7f2e40636bb89c0f2215f9141"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap-ng@0.9.6-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-s390x", "name": "libcap", "versionInfo": "2.78-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libcap-2.78-2.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9091cd31b413ae1bf00d63ae33335979"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap@2.78-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcbor-s390x", "name": "libcbor", "versionInfo": "0.14.0-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libcbor-0.14.0-3.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: c4b517d10dc0c6ac44d8ea9c33b33648"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcbor@0.14.0-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcom-err-s390x", "name": "libcom_err", "versionInfo": "1.47.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libcom_err-1.47.4-2.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 3283a8bc54cd1140763e358dda77d1db"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcom_err@1.47.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcurl-s390x", "name": "libcurl", "versionInfo": "8.22.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libcurl-8.22.0-1.1.hum1.s390x.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 0c5b302f2cbe4adbfed83efcf6525505"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcurl@8.22.0-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libeconf-s390x", "name": "libeconf", "versionInfo": "0.7.9-4.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libeconf-0.7.9-4.2.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 24897f69657431bf5a09b97a16595098"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libeconf@0.7.9-4.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libevent-s390x", "name": "libevent", "versionInfo": "2.1.13-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libevent-2.1.13-1.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND ISC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 6bd1ad8bb5100a92ba23105085cc3bbb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libevent@2.1.13-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfdisk-s390x", "name": "libfdisk", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libfdisk-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: bf76b0eac43d5f3ad92d590f7e25c4c6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfdisk@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libffi-s390x", "name": "libffi", "versionInfo": "3.8.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libffi-3.8.0-1.1.hum1.s390x.rpm", "licenseDeclared": "MIT AND CC-PDDC AND (GPL-3.0-or-later WITH Texinfo-exception)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: daa1490d61693f9116936c3d876b5ffb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libffi@3.8.0-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfido2-s390x", "name": "libfido2", "versionInfo": "1.17.0-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libfido2-1.17.0-6.2.hum1.s390x.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 82bfccfc4dc3b475c75118f9bc74c2e6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfido2@1.17.0-6.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfsverity-s390x", "name": "libfsverity", "versionInfo": "1.7-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libfsverity-1.7-4.1.hum1.s390x.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 384831578e6b342f78c6ac2bca35e630"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfsverity@1.7-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcc-s390x", "name": "libgcc", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libgcc-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: c427ffaf507d6cac77dae12f76be7f97"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcc@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcrypt-s390x", "name": "libgcrypt", "versionInfo": "1.12.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libgcrypt-1.12.4-1.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND (BSD-3-Clause OR GPL-2.0-only) AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later AND MIT-Modern-Variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 2446883791ed569227c74549116e4160"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcrypt@1.12.4-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgomp-s390x", "name": "libgomp", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libgomp-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 7a48dd387cf2dcca87af9029bd52a9ce"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgomp@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgpg-error-s390x", "name": "libgpg-error", "versionInfo": "1.61-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libgpg-error-1.61-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND (BSD-3-Clause OR LGPL-2.1-or-later) AND FSFULLR AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: ffb6f30df74b815e445d90d11515374e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgpg-error@1.61-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libidn2-s390x", "name": "libidn2", "versionInfo": "2.3.8-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libidn2-2.3.8-4.1.hum1.s390x.rpm", "licenseDeclared": "(GPL-2.0-or-later OR LGPL-3.0-or-later) AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 2d2df588b059873f276603a60db2d959"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libidn2@2.3.8-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libksba-s390x", "name": "libksba", "versionInfo": "1.8.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libksba-1.8.1-1.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND (LGPL-3.0-or-later OR GPL-2.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 2e61e170caccf8c88ad1f90025ac5db2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libksba@1.8.1-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-liblastlog2-s390x", "name": "liblastlog2", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/liblastlog2-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 28b1b1bcf834fa96e49837fc22c3f84a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/liblastlog2@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmount-s390x", "name": "libmount", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libmount-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: db23cb3112e0cef438ea2161e8f78959"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmount@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmpc-s390x", "name": "libmpc", "versionInfo": "1.4.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libmpc-1.4.1-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-3.0-or-later AND FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 88c6114ff75a60cb530e1c930e8e48a0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmpc@1.4.1-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp2-s390x", "name": "libnghttp2", "versionInfo": "1.69.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libnghttp2-1.69.0-6.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: dc406785eee18fa7e061c5e1fce9c144"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp2@1.69.0-6.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp3-s390x", "name": "libnghttp3", "versionInfo": "1.18.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libnghttp3-1.18.0-1.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 3976c42ace169ac57da71f3840eb2567"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp3@1.18.0-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpkgconf-s390x", "name": "libpkgconf", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libpkgconf-2.5.1-2.1.hum1.s390x.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f9793e392b28a496c552c8bcadc861d7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpkgconf@2.5.1-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpsl-s390x", "name": "libpsl", "versionInfo": "0.23.3-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libpsl-0.23.3-1.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: d7292c40c0f03cff92d9a954d31a28a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpsl@0.23.3-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-utils-s390x", "name": "libselinux-utils", "versionInfo": "3.11-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libselinux-utils-3.11-5.1.hum1.s390x.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 461c4567453d97fc7bc74bf42c057eee"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux-utils@3.11-5.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-s390x", "name": "libselinux", "versionInfo": "3.11-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libselinux-3.11-5.1.hum1.s390x.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 138830aa1320f79f6da74bfa4ad320fd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux@3.11-5.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsemanage-s390x", "name": "libsemanage", "versionInfo": "3.11-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libsemanage-3.11-4.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: bab522bfb7542ee5ef7396dadbb3cfa2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsemanage@3.11-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsepol-s390x", "name": "libsepol", "versionInfo": "3.11-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libsepol-3.11-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: d354f33b171ee2e3daf8d1b80681816e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsepol@3.11-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsmartcols-s390x", "name": "libsmartcols", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libsmartcols-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: aebcd90843b2b9d05b05d8306381672c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsmartcols@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-config-s390x", "name": "libssh-config", "versionInfo": "0.12.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libssh-config-0.12.2-1.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f26ba5abb68d2fea08f751a8569faa35"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh-config@0.12.2-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-s390x", "name": "libssh", "versionInfo": "0.12.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libssh-0.12.2-1.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 5cfcc7161aaa41cb9aabd429dd169933"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh@0.12.2-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libstdc++-s390x", "name": "libstdc++", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libstdc++-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 6575e03b09d764dc0b2f10318e3de716"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libstdc++@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtasn1-s390x", "name": "libtasn1", "versionInfo": "4.21.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libtasn1-4.21.0-2.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 55fcdd9b3d9fd6cad565d3d015649f77"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtasn1@4.21.0-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtool-ltdl-s390x", "name": "libtool-ltdl", "versionInfo": "2.6.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libtool-ltdl-2.6.2-1.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.0-or-later WITH Libtool-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 36bcc2c9c6efc6d7d0321cadac6cb85a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtool-ltdl@2.6.2-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libubsan-s390x", "name": "libubsan", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libubsan-16.2.1-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 368cf49e4a1d8d82ad82adf7447c95ac"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libubsan@16.2.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libunistring-s390x", "name": "libunistring", "versionInfo": "1.1-12.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libunistring-1.1-12.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: dd91f18d5af4f20ef9799606225e7449"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libunistring@1.1-12.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libusb1-s390x", "name": "libusb1", "versionInfo": "1.0.30-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libusb1-1.0.30-2.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: c98671d5cd78fd08e6914d049a797031"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libusb1@1.0.30-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libuuid-s390x", "name": "libuuid", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libuuid-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 0615723305ba8a79b30a6cdf82867fba"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libuuid@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libverto-s390x", "name": "libverto", "versionInfo": "0.3.2-13.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libverto-0.3.2-13.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: cb13852cb7d6b81b85fe55511359e65f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libverto@0.3.2-13.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-devel-s390x", "name": "libxcrypt-devel", "versionInfo": "4.5.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libxcrypt-devel-4.5.2-4.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 1b780c78e6f5b4a014060e49fa55b087"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt-devel@4.5.2-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-s390x", "name": "libxcrypt", "versionInfo": "4.5.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libxcrypt-4.5.2-4.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 08be51fb7f0629c9314cec58dee56978"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt@4.5.2-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxml2-16-s390x", "name": "libxml2-16", "versionInfo": "2.15.4-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libxml2-16-2.15.4-1.2.hum1.s390x.rpm", "licenseDeclared": "MIT AND ISC-Veillard AND W3C", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 01d31764a91a3b2444e68b22de4a4218"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxml2-16@2.15.4-1.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libzstd-s390x", "name": "libzstd", "versionInfo": "1.5.7-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/libzstd-1.5.7-6.2.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: ed6549da4aaaf48bdfcc6793aed1854b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libzstd@1.5.7-6.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-linkdupes-s390x", "name": "linkdupes", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/linkdupes-0.7.3-3.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: bc74850de3edd8bd9623e57227b10792"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/linkdupes@0.7.3-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-libs-s390x", "name": "lua-libs", "versionInfo": "5.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/lua-libs-5.5.1-2.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 7ace7a3ea0a18dfbebe513dcd0fd92d3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-libs@5.5.1-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-srpm-macros-s390x", "name": "lua-srpm-macros", "versionInfo": "1-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/lua-srpm-macros-1-18.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 68293f00751e1bc423b0bb2ac4e21221"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-srpm-macros@1-18.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lz4-libs-s390x", "name": "lz4-libs", "versionInfo": "1.10.0-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/l/lz4-libs-1.10.0-5.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: c5e182e1b1badbfacae862d39241e7bd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lz4-libs@1.10.0-5.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-make-s390x", "name": "make", "versionInfo": "1:4.4.1-13.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/m/make-4.4.1-13.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND GFDL-1.3-or-later AND FSFULLR", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: ae6b3fc3315c06929f5b817212fac215"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/make@4.4.1-13.1.hum1?arch=s390x&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-meson-srpm-macros-s390x", "name": "meson-srpm-macros", "versionInfo": "1.12.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/m/meson-srpm-macros-1.12.1-2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 7617c98560a327b943961c400248f04b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/meson-srpm-macros@1.12.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpdecimal-s390x", "name": "mpdecimal", "versionInfo": "4.0.1-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/m/mpdecimal-4.0.1-4.1.hum1.s390x.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: e761ecb4256b8813aed551523066abed"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpdecimal@4.0.1-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpfr-s390x", "name": "mpfr", "versionInfo": "4.2.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/m/mpfr-4.2.2-4.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: d28d4cb6e1defa71fd6b17a0d945accf"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpfr@4.2.2-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-base-s390x", "name": "ncurses-base", "versionInfo": "6.6-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/n/ncurses-base-6.6-3.1.hum1.noarch.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: a90d36a4f9603dffe4896cbc1c4c42c0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-base@6.6-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-libs-s390x", "name": "ncurses-libs", "versionInfo": "6.6-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/n/ncurses-libs-6.6-3.1.hum1.s390x.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 44c15d427cdc441e17793d8861c7fbcb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-libs@6.6-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nettle-s390x", "name": "nettle", "versionInfo": "4.0-5.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/n/nettle-4.0-5.5.hum1.s390x.rpm", "licenseDeclared": "LGPL-3.0-or-later OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 8431f7529e7509272936ea0226303a9b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nettle@4.0-5.5.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-s390x", "name": "ngtcp2-crypto-ossl", "versionInfo": "1.22.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/n/ngtcp2-crypto-ossl-1.22.1-3.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 99da38ce162d9f06ee77852585011a58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2-crypto-ossl@1.22.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-s390x", "name": "ngtcp2", "versionInfo": "1.22.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/n/ngtcp2-1.22.1-3.1.hum1.s390x.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 6b2a694f6b84034640dd546dbf12d430"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2@1.22.1-3.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-npth-s390x", "name": "npth", "versionInfo": "1.8-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/n/npth-1.8-5.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: fc87bebb4c17d7b4d0a29da58a700725"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/npth@1.8-5.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-s390x", "name": "ocaml-srpm-macros", "versionInfo": "11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/o/ocaml-srpm-macros-11-4.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 6d563b597c552c5ce842bdd83b6d8dd1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ocaml-srpm-macros@11-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openblas-srpm-macros-s390x", "name": "openblas-srpm-macros", "versionInfo": "2-23.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/o/openblas-srpm-macros-2-23.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: bf3a7ebbd05d3c09e9712e957b99d3b5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openblas-srpm-macros@2-23.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openldap-s390x", "name": "openldap", "versionInfo": "2.6.15-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/o/openldap-2.6.15-1.1.hum1.s390x.rpm", "licenseDeclared": "OLDAP-2.8", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: e255cdc3b91df628373758b223fe3454"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openldap@2.6.15-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-s390x", "name": "openssl-fips-provider-upstream", "versionInfo": "1:3.5.9-0.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/o/openssl-fips-provider-upstream-3.5.9-0.3.hum1.s390x.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: c970b2cdf7483b9239d16e5c31388dd1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-fips-provider-upstream@3.5.9-0.3.hum1?arch=s390x&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-libs-s390x", "name": "openssl-libs", "versionInfo": "1:3.5.9-0.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/o/openssl-libs-3.5.9-0.3.hum1.s390x.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 37a8d14c3643586907cf278b82651d42"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.5.9-0.3.hum1?arch=s390x&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-trust-s390x", "name": "p11-kit-trust", "versionInfo": "0.26.5-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/p11-kit-trust-0.26.5-1.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 3ae87eeb33ed8f9e94d75b32bfa1763f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit-trust@0.26.5-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-s390x", "name": "p11-kit", "versionInfo": "0.26.5-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/p11-kit-0.26.5-1.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 2b92aca4049128081bf8041e53744551"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit@0.26.5-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-s390x", "name": "package-notes-srpm-macros", "versionInfo": "0.20-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/package-notes-srpm-macros-0.20-2.hum1.noarch.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 4f6f48e6009eb2455ec194f477f9b058"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/package-notes-srpm-macros@0.20-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-libs-s390x", "name": "pam-libs", "versionInfo": "1.7.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/pam-libs-1.7.2-4.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: d493aa4fccfe30eeac848344adb1e973"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam-libs@1.7.2-4.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-patch-s390x", "name": "patch", "versionInfo": "2.8-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/patch-2.8-6.2.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 83763fc465233583ed914a204f17ca35"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/patch@2.8-6.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-syntax-s390x", "name": "pcre2-syntax", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/pcre2-syntax-10.49-0.2.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 5892ce77122ec3ecfec34fe8679d2737"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-syntax@10.49-0.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-s390x", "name": "pcre2", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/pcre2-10.49-0.2.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 969d2435bc379b17d80e15a7454b108b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2@10.49-0.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-perl-srpm-macros-s390x", "name": "perl-srpm-macros", "versionInfo": "1-65.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/perl-srpm-macros-1-65.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 0f8b16c4e63430bcff87cb49fa941740"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/perl-srpm-macros@1-65.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-m4-s390x", "name": "pkgconf-m4", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/pkgconf-m4-2.5.1-2.1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 2ee038a201817d6d825292dc25c6b873"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-m4@2.5.1-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-s390x", "name": "pkgconf-pkg-config", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/pkgconf-pkg-config-2.5.1-2.1.hum1.s390x.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 1d2899e00e34310d47b2b7421b6007e3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-pkg-config@2.5.1-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-s390x", "name": "pkgconf", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/pkgconf-2.5.1-2.1.hum1.s390x.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 7ee4fafd972590d96ea9e6bf8752b773"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf@2.5.1-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-policycoreutils-s390x", "name": "policycoreutils", "versionInfo": "3.11-2.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/policycoreutils-3.11-2.3.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 7cd89314b9f5a5bb496f382f69c5bc1b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/policycoreutils@3.11-2.3.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-popt-s390x", "name": "popt", "versionInfo": "1.19-11.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/popt-1.19-11.2.hum1.s390x.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 554f50854a7348f8f82ef61572328c5a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/popt@1.19-11.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-s390x", "name": "publicsuffix-list-dafsa", "versionInfo": "20260624-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/publicsuffix-list-dafsa-20260624-2.1.hum1.noarch.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 258b22e06326223e99678d8138bba57d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/publicsuffix-list-dafsa@20260624-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-s390x", "name": "pyproject-srpm-macros", "versionInfo": "1.23.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/pyproject-srpm-macros-1.23.2-1.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: e82edc55e5be2f520af44c2b0337e92a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pyproject-srpm-macros@1.23.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-pip-wheel-s390x", "name": "python-pip-wheel", "versionInfo": "26.2-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/python-pip-wheel-26.2-0.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND Python-2.0.1 AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MPL-2.0 AND (Apache-2.0 OR BSD-2-Clause)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 30b1136e6baf2dc70c7e01a45cf96050"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-pip-wheel@26.2-0.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-srpm-macros-s390x", "name": "python-srpm-macros", "versionInfo": "3.14-12.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/python-srpm-macros-3.14-12.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND PSF-2.0 AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 618d0c006548a702f22df8ec49dca3a5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-srpm-macros@3.14-12.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-boolean.py-s390x", "name": "python3-boolean.py", "versionInfo": "5.0-10.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/releases/44/Everything/s390x/os/Packages/p/python3-boolean.py-5.0-10.fc44.noarch.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: b7af00dcc3668fd56d3b09f1f1b171a9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-boolean.py@5.0-10.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-libs-s390x", "name": "python3-libs", "versionInfo": "3.14.8-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/python3-libs-3.14.8-1.1.hum1.s390x.rpm", "licenseDeclared": "Python-2.0.1 AND MIT AND BSD-3-Clause AND MIT-CMU AND HPND-SMC AND BSD-2-Clause AND dtoa AND Unicode-3.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 6f8a07d52c73aedd90eaf17e9963afb0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-libs@3.14.8-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-license-expression-s390x", "name": "python3-license-expression", "versionInfo": "30.4.4-4.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora-secondary/releases/44/Everything/s390x/os/Packages/p/python3-license-expression-30.4.4-4.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 009ffab3cc792b96ce398d6c97aa5a0a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-license-expression@30.4.4-4.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-s390x", "name": "python3", "versionInfo": "3.14.8-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/p/python3-3.14.8-1.1.hum1.s390x.rpm", "licenseDeclared": "Python-2.0.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 8329d32d747dd00a85a694e1d852200f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3@3.14.8-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt5-srpm-macros-s390x", "name": "qt5-srpm-macros", "versionInfo": "5.15.18-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/q/qt5-srpm-macros-5.15.18-3.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 4ffb52b3bdf4017e6c58f49b621e1c54"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt5-srpm-macros@5.15.18-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt6-srpm-macros-s390x", "name": "qt6-srpm-macros", "versionInfo": "6.11.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/q/qt6-srpm-macros-6.11.2-1.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 8478ebf3654d031de2c0964fb1f5d8a2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt6-srpm-macros@6.11.2-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-readline-s390x", "name": "readline", "versionInfo": "8.3-7.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/readline-8.3-7.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: a70c027f9fb815d87b68a1f88b0fb488"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/readline@8.3-7.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-redhat-rpm-config-s390x", "name": "redhat-rpm-config", "versionInfo": "345-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/redhat-rpm-config-345-4.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9e9b9de801d40d8b16d77058da82cde9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/redhat-rpm-config@345-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-libs-s390x", "name": "rpm-build-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/rpm-build-libs-6.1.0-1.2.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 5f2088971269dd65910342236bbcd087"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build-libs@6.1.0-1.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-s390x", "name": "rpm-build", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/rpm-build-6.1.0-1.2.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 6545ce3e22b19ae3faa5e35c87cb323a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build@6.1.0-1.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-libs-s390x", "name": "rpm-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/rpm-libs-6.1.0-1.2.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 71f9d1092ecb70ce1080123c49e1d560"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-libs@6.1.0-1.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-s390x", "name": "rpm-plugin-selinux", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/rpm-plugin-selinux-6.1.0-1.2.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 89f628bbfaa752a6d7a217a1b9cb49a1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-plugin-selinux@6.1.0-1.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sequoia-s390x", "name": "rpm-sequoia", "versionInfo": "1.10.1.1-1.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/rpm-sequoia-1.10.1.1-1.5.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.0-or-later AND Apache-2.0 AND BSL-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 228a62227d7dd60cd6a935f4a4f08567"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sequoia@1.10.1.1-1.5.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sign-libs-s390x", "name": "rpm-sign-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/rpm-sign-libs-6.1.0-1.2.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: afdc299a6da2e389cb249d5c263772cd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sign-libs@6.1.0-1.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-s390x", "name": "rpm", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/rpm-6.1.0-1.2.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9378d50306221b24d269df7fee547c98"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm@6.1.0-1.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rust-srpm-macros-s390x", "name": "rust-srpm-macros", "versionInfo": "28.5-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/r/rust-srpm-macros-28.5-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 606a7a2166723ba0e3515fa8244596dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rust-srpm-macros@28.5-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sed-s390x", "name": "sed", "versionInfo": "4.10-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/sed-4.10-2.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 67cda685cb70b3748edada0ba481db24"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sed@4.10-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-targeted-s390x", "name": "selinux-policy-targeted", "versionInfo": "45.21-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/selinux-policy-targeted-45.21-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: afd3a0e6066718b6633918ff5031c1ce"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy-targeted@45.21-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-s390x", "name": "selinux-policy", "versionInfo": "45.21-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/selinux-policy-45.21-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 910958d9c5c1913d447a1e64fb0ad0b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy@45.21-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-setup-s390x", "name": "setup", "versionInfo": "2.15.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/setup-2.15.1-2.1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 7306efa4649c49f3d249269ae6781e58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/setup@2.15.1-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-s390x", "name": "shadow-utils", "versionInfo": "2:4.20.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/shadow-utils-4.20.0-1.1.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 44d5607c139bd8e95d56bb76b39f25a3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils@4.20.0-1.1.hum1?arch=s390x&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-libs-s390x", "name": "sqlite-libs", "versionInfo": "3.54.0-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/sqlite-libs-3.54.0-0.1.hum1.s390x.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 1b85545bd9788c0a3344e71b57eab92b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite-libs@3.54.0-0.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-libs-s390x", "name": "systemd-libs", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/systemd-libs-261.2-1.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 14d7c8a2c8d2cc685ec1cc68ec48f362"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-libs@261.2-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-s390x", "name": "systemd-standalone-sysusers", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/s/systemd-standalone-sysusers-261.2-1.1.hum1.s390x.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: fc09344446758e6866599a31399d3bf6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-standalone-sysusers@261.2-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tar-s390x", "name": "tar", "versionInfo": "2:1.35-10.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/t/tar-1.35-10.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: d20eece15535d831172af71cb77a0e0b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tar@1.35-10.1.hum1?arch=s390x&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tpm2-tss-s390x", "name": "tpm2-tss", "versionInfo": "4.2.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/t/tpm2-tss-4.2.0-1.1.hum1.s390x.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 4bcba63ab39f593aa7e78024866aa12a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tpm2-tss@4.2.0-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-s390x", "name": "tree-sitter-srpm-macros", "versionInfo": "0.4.6-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/t/tree-sitter-srpm-macros-0.4.6-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f65af17df28df341ec383338fcc47481"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tree-sitter-srpm-macros@0.4.6-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tzdata-s390x", "name": "tzdata", "versionInfo": "2026e-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/t/tzdata-2026e-1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain AND (GPL-2.0-only WITH ClassPath-exception-2.0)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: a1336045dee9a14e5ecb98f2e75ca023"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tzdata@2026e-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-unzip-s390x", "name": "unzip", "versionInfo": "6.0-71.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/u/unzip-6.0-71.1.hum1.s390x.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 720c2a47a1797b3214555554c2a79ef4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/unzip@6.0-71.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-core-s390x", "name": "util-linux-core", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/u/util-linux-core-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 81ead8c15499d8e676405f12bae9face"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux-core@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-s390x", "name": "util-linux", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/u/util-linux-2.42.4-2.1.hum1.s390x.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: da08fb9caf18b27ad4cd85f3492e9c9b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux@2.42.4-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-which-s390x", "name": "which", "versionInfo": "2.25-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/w/which-2.25-2.1.hum1.s390x.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 3faab74931530d51d59f9962eae4497b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/which@2.25-2.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xxhash-libs-s390x", "name": "xxhash-libs", "versionInfo": "0.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/x/xxhash-libs-0.8.4-1.1.hum1.s390x.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: ce696abcca56a465f23950d9d2b33ec8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xxhash-libs@0.8.4-1.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-libs-s390x", "name": "xz-libs", "versionInfo": "1:5.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/x/xz-libs-5.8.4-1.1.hum1.s390x.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: dc5c19c8e60d04be2ff9e2f05b78bd2d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz-libs@5.8.4-1.1.hum1?arch=s390x&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-s390x", "name": "xz", "versionInfo": "1:5.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/x/xz-5.8.4-1.1.hum1.s390x.rpm", "licenseDeclared": "0BSD AND GPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 766bb2c2f42616c8be4d5353b1827d69"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz@5.8.4-1.1.hum1?arch=s390x&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zig-srpm-macros-s390x", "name": "zig-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/z/zig-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 0c226eb1fa4d5fc3d272055b6397b077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zig-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zip-s390x", "name": "zip", "versionInfo": "3.0-46.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/z/zip-3.0-46.1.hum1.s390x.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: dabbcab97059c98ec49498b32e779b01"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zip@3.0-46.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zlib-ng-compat-s390x", "name": "zlib-ng-compat", "versionInfo": "2.3.3-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/z/zlib-ng-compat-2.3.3-6.1.hum1.s390x.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: ccb3116e066283f3ac05000db321a028"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zlib-ng-compat@2.3.3-6.1.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zstd-s390x", "name": "zstd", "versionInfo": "1.5.7-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/s390x/Packages/z/zstd-1.5.7-6.2.hum1.s390x.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 3344acb0ce44f331ff2d587cab1596a7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zstd@1.5.7-6.2.hum1?arch=s390x"}]}, {"SPDXID": "SPDXRef-Buildroot-syft-x86-64", "name": "syft-buildroot-x86_64", "versionInfo": "77531cad", "downloadLocation": "NOASSERTION", "filesAnalyzed": false}, {"SPDXID": "SPDXRef-Buildroot-Package-R-srpm-macros-x86-64", "name": "R-srpm-macros", "versionInfo": "1.3.7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/R-srpm-macros-1.3.7-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: af95299e83e51b62a40fa7a42d357077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/R-srpm-macros@1.3.7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-add-determinism-x86-64", "name": "add-determinism", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/add-determinism-0.7.3-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 02acf5d1809fd4e81f704e1d95ed7b89"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/add-determinism@0.7.3-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-alternatives-x86-64", "name": "alternatives", "versionInfo": "1.33-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/alternatives-1.33-6.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 5eb4df30f945eef277e2acb1c5b781e6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/alternatives@1.33-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-docs-x86-64", "name": "annobin-docs", "versionInfo": "13.32-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/annobin-docs-13.32-1.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 18d60a72e7a0be13693c92c6e0d885c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-docs@13.32-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-x86-64", "name": "annobin-plugin-gcc", "versionInfo": "13.32-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/annobin-plugin-gcc-13.32-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND GFDL-1.3-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: d91069c827cea6f3d733bf2670282118"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/annobin-plugin-gcc@13.32-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ansible-srpm-macros-x86-64", "name": "ansible-srpm-macros", "versionInfo": "1-22.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/ansible-srpm-macros-1-22.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 6343ff368e5236625d015dbc91e70769"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ansible-srpm-macros@1-22.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-askalono-cli-x86-64", "name": "askalono-cli", "versionInfo": "0.5.0-4.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/a/askalono-cli-0.5.0-4.fc44.x86_64.rpm", "licenseDeclared": "Apache-2.0 AND CC0-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR BSL-1.0) AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 02a05ce513bee7180cb21f5cd846f783"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/askalono-cli@0.5.0-4.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-audit-libs-x86-64", "name": "audit-libs", "versionInfo": "4.2.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/a/audit-libs-4.2.1-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: ec3ac4d4c3901cbd76eb9447ca97e720"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/audit-libs@4.2.1-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bash-x86-64", "name": "bash", "versionInfo": "5.3.20-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bash-5.3.20-1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 86fbd5cdc1fc9f73c5a80a184759cf26"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bash@5.3.20-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-binutils-x86-64", "name": "binutils", "versionInfo": "2.46.1-1.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/binutils-2.46.1-1.3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH Bison-exception-2.2) AND (LGPL-2.0-or-later WITH GCC-exception-2.0) AND BSD-3-Clause AND GFDL-1.3-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 0cb0be3177bcc257fc8f1326ec6f3142"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/binutils@2.46.1-1.3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-x86-64", "name": "build-reproducibility-srpm-macros", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/build-reproducibility-srpm-macros-0.7.3-3.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 4dea8bdbe97b4534f60d8a6d0b9c793c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/build-reproducibility-srpm-macros@0.7.3-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-libs-x86-64", "name": "bzip2-libs", "versionInfo": "1.0.8-24.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bzip2-libs-1.0.8-24.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 3d0299d5f7edb1ddf3d7737a8b344bca"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2-libs@1.0.8-24.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-bzip2-x86-64", "name": "bzip2", "versionInfo": "1.0.8-24.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/b/bzip2-1.0.8-24.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-4-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 25ceddb521c14cc7bc826c0ec6640adc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/bzip2@1.0.8-24.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ca-certificates-x86-64", "name": "ca-certificates", "versionInfo": "2026.2.90_v9.0.317-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/ca-certificates-2026.2.90_v9.0.317-1.1.hum1.noarch.rpm", "licenseDeclared": "MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: a195cd97c3daf258791a89c2b5af39d2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ca-certificates@2026.2.90_v9.0.317-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cmake-srpm-macros-x86-64", "name": "cmake-srpm-macros", "versionInfo": "4.3.0-5.6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cmake-srpm-macros-4.3.0-5.6.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND MIT-open-group AND Zlib AND Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: e2f14e03350d92477884a522df888c53"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cmake-srpm-macros@4.3.0-5.6.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-common-x86-64", "name": "coreutils-common", "versionInfo": "9.12-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/coreutils-common-9.12-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 07e605a0b418cccac841adc20aa4ba1c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils-common@9.12-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-coreutils-x86-64", "name": "coreutils", "versionInfo": "9.12-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/coreutils-9.12-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-no-invariants-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: ebcb432638b4811a1b7f8f89f4aff370"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/coreutils@9.12-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpio-x86-64", "name": "cpio", "versionInfo": "2.15-10.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cpio-2.15-10.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 464bcd9ea807329681bc82904f3c89ca"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpio@2.15-10.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cpp-x86-64", "name": "cpp", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cpp-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 6155d5751aec01ed71d09c9f8e94551e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cpp@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-config-default-x86-64", "name": "crypto-policies-config-default", "versionInfo": "20260812-1.git359ab16.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/crypto-policies-config-default-20260812-1.git359ab16.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 1e6fce169a2973e4f665428cb52ae9ad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies-config-default@20260812-1.git359ab16.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-crypto-policies-x86-64", "name": "crypto-policies", "versionInfo": "20260812-1.git359ab16.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/crypto-policies-20260812-1.git359ab16.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9756d9b800cfeafa3f39e494328a620e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/crypto-policies@20260812-1.git359ab16.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-curl-x86-64", "name": "curl", "versionInfo": "8.22.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/curl-8.22.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 780e451ae2b4d6a094306b9aaa666887"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/curl@8.22.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-x86-64", "name": "cyrus-sasl-lib", "versionInfo": "2.1.28-37.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/c/cyrus-sasl-lib-2.1.28-37.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-Attribution-HPND-disclaimer", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 7010d12ef8d1784c80154ffb153fba63"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/cyrus-sasl-lib@2.1.28-37.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-debugedit-x86-64", "name": "debugedit", "versionInfo": "5.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/debugedit-5.3-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 2ce506d8cc0cffd0a8e4d0c5f0f936d6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/debugedit@5.3-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-diffutils-x86-64", "name": "diffutils", "versionInfo": "3.12-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/diffutils-3.12-6.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 8c6951e4fcdf1695f6eb9e6ef74730c8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/diffutils@3.12-6.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-dwz-x86-64", "name": "dwz", "versionInfo": "0.17-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/d/dwz-0.17-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND GPL-2.0-or-later AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9c4561353d076cd4b1556d806d46c8c4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/dwz@0.17-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ed-x86-64", "name": "ed", "versionInfo": "1.22.6-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/ed-1.22.6-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: a4e85b35383423885ebd21b77bba6170"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ed@1.22.6-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-efi-srpm-macros-x86-64", "name": "efi-srpm-macros", "versionInfo": "6-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/efi-srpm-macros-6-9.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: cba49c2554beb37df9cc6bb744737e2b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/efi-srpm-macros@6-9.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-x86-64", "name": "elfutils-debuginfod-client", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-debuginfod-client-0.196-1.1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: c6950ee47cabdbb447dd12e8f11ce2ec"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-debuginfod-client@0.196-1.1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libelf-x86-64", "name": "elfutils-libelf", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-libelf-0.196-1.1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 5fdb83b704a22368baf3ebd09ce19139"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libelf@0.196-1.1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-libs-x86-64", "name": "elfutils-libs", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-libs-0.196-1.1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: e1794cbfac97b414417c7c242229bf1c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils-libs@0.196-1.1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-elfutils-x86-64", "name": "elfutils", "versionInfo": "0.196-1.1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/elfutils-0.196-1.1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND (GPL-2.0-or-later OR LGPL-3.0-or-later) AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 085e3d859dfa30b810917353c33e9feb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/elfutils@0.196-1.1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-erlang-srpm-macros-x86-64", "name": "erlang-srpm-macros", "versionInfo": "0.3.11-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/erlang-srpm-macros-0.3.11-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 063020bc2b254fec865c06f313930cec"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/erlang-srpm-macros@0.3.11-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-expat-x86-64", "name": "expat", "versionInfo": "2.8.5-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/e/expat-2.8.5-1.2.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 0c5cbf6236a08bc929ff502c28ef9da1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/expat@2.8.5-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-libs-x86-64", "name": "file-libs", "versionInfo": "5.48-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/file-libs-5.48-3.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 693d8445c4e52df1e5fad8a746e3089b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file-libs@5.48-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-x86-64", "name": "filesystem-srpm-macros", "versionInfo": "3.18-59.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/filesystem-srpm-macros-3.18-59.1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: cff1a42588f4eb1a758735b668069a67"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem-srpm-macros@3.18-59.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-filesystem-x86-64", "name": "filesystem", "versionInfo": "3.18-59.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/filesystem-3.18-59.1.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: a736f1c0487b505dd6c16ceaaeb3f0a4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/filesystem@3.18-59.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-file-x86-64", "name": "file", "versionInfo": "5.48-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/file-5.48-3.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause-Darwin AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: fc18ee9b195bb0bef239935848f36eb0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/file@5.48-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-findutils-x86-64", "name": "findutils", "versionInfo": "1:4.11.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/findutils-4.11.0-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: a6ab9adb99798fd43e71b67daa2fe8b8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/findutils@4.11.0-2.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fonts-srpm-macros-x86-64", "name": "fonts-srpm-macros", "versionInfo": "1:5.0.0-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/fonts-srpm-macros-5.0.0-4.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 72e451571f24737949a256d091508d0c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fonts-srpm-macros@5.0.0-4.hum1?arch=noarch&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-forge-srpm-macros-x86-64", "name": "forge-srpm-macros", "versionInfo": "0.4.0-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/forge-srpm-macros-0.4.0-5.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: bfbed65969ec708556df3750591a377d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/forge-srpm-macros@0.4.0-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-fpc-srpm-macros-x86-64", "name": "fpc-srpm-macros", "versionInfo": "1.3-17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/f/fpc-srpm-macros-1.3-17.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 1f7e4cb902ccc37236f8d34ff8873cf2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/fpc-srpm-macros@1.3-17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gap-srpm-macros-x86-64", "name": "gap-srpm-macros", "versionInfo": "2-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gap-srpm-macros-2-3.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 70e3423696085d13791fefc0be7cdf15"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gap-srpm-macros@2-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gawk-x86-64", "name": "gawk", "versionInfo": "5.4.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gawk-5.4.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: cfea5a78989dd66244218dbc0c6c0ba4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gawk@5.4.1-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-x86-64", "name": "gcc-plugin-annobin", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gcc-plugin-annobin-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f2b83ae39c4c6509f801b0c8b2dd22b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc-plugin-annobin@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gcc-x86-64", "name": "gcc", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gcc-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f9ac343d0c30d96195e02f2b54883446"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gcc@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdb-minimal-x86-64", "name": "gdb-minimal", "versionInfo": "17.2-6.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gdb-minimal-17.2-6.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND BSD-3-Clause AND FSFAP AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain AND GFDL-1.3-or-later AND LGPL-2.0-or-later WITH GCC-exception-2.0 AND GPL-3.0-or-later WITH GCC-exception-3.1 AND GPL-2.0-or-later WITH GNU-compiler-exception AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: eecc3642be0c160e16f5cf1569b8f3fd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdb-minimal@17.2-6.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gdbm-libs-x86-64", "name": "gdbm-libs", "versionInfo": "1:1.26-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gdbm-libs-1.26-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 1d2adcfbc7a8c3d3e29e56db4d441037"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gdbm-libs@1.26-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ghc-srpm-macros-x86-64", "name": "ghc-srpm-macros", "versionInfo": "1.10-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/ghc-srpm-macros-1.10-2.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: c59363c566e4f370953f5f4b048e594e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ghc-srpm-macros@1.10-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-common-x86-64", "name": "glibc-common", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-common-2.43-9.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9eab516d0f80b295960361b63b319245"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-common@2.43-9.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-devel-x86-64", "name": "glibc-devel", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-devel-2.43-9.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 4ab96fa4ca1a669a0d850091bdd89486"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-devel@2.43-9.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-gconv-extra-x86-64", "name": "glibc-gconv-extra", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-gconv-extra-2.43-9.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: eaeef60b7dbad9934cccc55d1dd62c80"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-gconv-extra@2.43-9.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-x86-64", "name": "glibc-minimal-langpack", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-minimal-langpack-2.43-9.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9d9998236922ccfdf80f9cbfa061931a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc-minimal-langpack@2.43-9.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-glibc-x86-64", "name": "glibc", "versionInfo": "2.43-9.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/glibc-2.43-9.2.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND SunPro AND LGPL-2.1-or-later WITH GCC-exception-2.0 AND BSD-3-Clause AND GPL-2.0-or-later AND LGPL-2.1-or-later WITH GNU-compiler-exception AND GPL-2.0-only AND ISC AND LicenseRef-Fedora-Public-Domain AND HPND AND CMU-Mach AND LGPL-2.0-or-later AND Unicode-3.0 AND GFDL-1.1-or-later AND GPL-1.0-or-later AND FSFUL AND MIT AND Inner-Net-2.0 AND X11 AND GPL-2.0-or-later WITH GCC-exception-2.0 AND GFDL-1.3-only AND GFDL-1.1-only AND GPL-3.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic-3.0 AND GPL-3.0-or-later WITH Texinfo-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 41c73a734782d852fc7481d7fbd4130a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/glibc@2.43-9.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gmp-x86-64", "name": "gmp", "versionInfo": "1:6.3.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gmp-6.3.0-6.1.hum1.x86_64.rpm", "licenseDeclared": "(LGPL-3.0-or-later OR GPL-2.0-or-later OR (LGPL-3.0-or-later AND GPL-2.0-or-later)) AND GFDL-1.3-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 2c7e7fb43e049cf045044f4d5bcf6fb1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gmp@6.3.0-6.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnat-srpm-macros-x86-64", "name": "gnat-srpm-macros", "versionInfo": "7-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnat-srpm-macros-7-3.hum1.noarch.rpm", "licenseDeclared": "FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 66efb6ab04e5e1a84478a688e2f149a3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnat-srpm-macros@7-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnome-srpm-macros-x86-64", "name": "gnome-srpm-macros", "versionInfo": "1.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/x86_64/Packages/g/gnome-srpm-macros-1.0-1.fc44.noarch.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 2bbaa6afcb861d76b0036e4b5bf9b3be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnome-srpm-macros@1.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnulib-l10n-x86-64", "name": "gnulib-l10n", "versionInfo": "20241231-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnulib-l10n-20241231-4.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 5628836ab4d4e824bcadb20d87a01a33"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnulib-l10n@20241231-4.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-x86-64", "name": "gnupg2-dirmngr", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-dirmngr-2.4.9-18.2.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 64faf73544d16702ac4caeaed331a9de"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-dirmngr@2.4.9-18.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-x86-64", "name": "gnupg2-gpg-agent", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-gpg-agent-2.4.9-18.2.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9546299c3fa6e253822bbb48b47564a9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpg-agent@2.4.9-18.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-x86-64", "name": "gnupg2-gpgconf", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-gpgconf-2.4.9-18.2.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 017d50061482f5af2a52687e6bfeeded"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-gpgconf@2.4.9-18.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-x86-64", "name": "gnupg2-keyboxd", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-keyboxd-2.4.9-18.2.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: bb774c82d733bb4b5bcacbcfcc136a0d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-keyboxd@2.4.9-18.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-verify-x86-64", "name": "gnupg2-verify", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-verify-2.4.9-18.2.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 0b9ed17086f9631984af7ad0b65ed7be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2-verify@2.4.9-18.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnupg2-x86-64", "name": "gnupg2", "versionInfo": "2.4.9-18.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnupg2-2.4.9-18.2.hum1.x86_64.rpm", "licenseDeclared": "CC0-1.0 AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later AND (BSD-3-Clause OR LGPL-3.0-or-later OR GPL-2.0-or-later) AND CC-BY-4.0 AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 8ed8d266f88c4e5d1ddc093f83220a2b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnupg2@2.4.9-18.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gnutls-x86-64", "name": "gnutls", "versionInfo": "3.8.13-5.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gnutls-3.8.13-5.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: dfbbb8930398b4570e1f04b3cecbce3d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gnutls@3.8.13-5.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-filesystem-x86-64", "name": "go-filesystem", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/go-filesystem-3.8.0-3.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: b7ba053e6fc52967827728a4a06c6592"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-filesystem@3.8.0-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-rpm-macros-x86-64", "name": "go-rpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/go-rpm-macros-3.8.0-3.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9ee7b1a24cd488ecf4304dfe6dbedc8f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-rpm-macros@3.8.0-3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-srpm-macros-x86-64", "name": "go-srpm-macros", "versionInfo": "3.8.0-3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/go-srpm-macros-3.8.0-3.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 58fd7d8eb056ce7d09e3ba375de1effc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-srpm-macros@3.8.0-3.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-go-vendor-tools-x86-64", "name": "go-vendor-tools", "versionInfo": "0.12.0-1.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/x86_64/Packages/g/go-vendor-tools-0.12.0-1.fc44.noarch.rpm", "licenseDeclared": "MIT AND BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 7c4ed6389413dbed713121b1168f24da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/go-vendor-tools@0.12.0-1.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-bin-x86-64", "name": "golang1.27-bin", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/golang1.27-bin-1.27.2-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 84db6ae4111d3f6c9e8df671e8262bfb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-bin@1.27.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-src-x86-64", "name": "golang1.27-src", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/golang1.27-src-1.27.2-1.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f40c9e87cab011209fed012b75f85d64"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27-src@1.27.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golang1.27-x86-64", "name": "golang1.27", "versionInfo": "1.27.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/golang1.27-1.27.2-1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 1eee2e5d533071fcc5026d61d8a8babd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golang1.27@1.27.2-1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-golist-x86-64", "name": "golist", "versionInfo": "0.11.0-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/golist-0.11.0-2.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause AND BSD-3-Clause AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: c94866cb8a1c5c8a4f2192fce2ae701f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/golist@0.11.0-2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gpgverify-x86-64", "name": "gpgverify", "versionInfo": "2.2-5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gpgverify-2.2-5.hum1.noarch.rpm", "licenseDeclared": "Boehm-GC", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9637bdca60814388d4c5b144d923e6d4"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gpgverify@2.2-5.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-grep-x86-64", "name": "grep", "versionInfo": "3.12-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/grep-3.12-4.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND LGPL-2.1-or-later AND GPL-2.0-or-later AND LGPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 30caafcf9e86d9e314469049d27a486b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/grep@3.12-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-gzip-x86-64", "name": "gzip", "versionInfo": "1.15-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/g/gzip-1.15-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GFDL-1.3-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 5a6149f1ac63b8ec9f2138279c7f179b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/gzip@1.15-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-x86-64", "name": "hummingbird-gpg-keys", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-gpg-keys-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 01a73721cc0ecdcb5d9f3929f6777157"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-gpg-keys@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-release-x86-64", "name": "hummingbird-release", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-release-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: d1c993eba75002797ea72c3cd1266853"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-release@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-hummingbird-repos-x86-64", "name": "hummingbird-repos", "versionInfo": "20251124-1.17.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/h/hummingbird-repos-20251124-1.17.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 1704eb0434ddab68e1c756070246f576"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/hummingbird-repos@20251124-1.17.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-x86-64", "name": "ima-evm-utils-libs", "versionInfo": "1.6.2-12.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/i/ima-evm-utils-libs-1.6.2-12.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 3f7e9a8fa123cd5e5ea89cf63473c45e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ima-evm-utils-libs@1.6.2-12.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-info-x86-64", "name": "info", "versionInfo": "7.2-9.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/i/info-7.2-9.fc44.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 7cd06c9116234e26a968b1c2ff5be47d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/info@7.2-9.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-jansson-x86-64", "name": "jansson", "versionInfo": "2.14-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/jansson-2.14-5.1.hum1.x86_64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: c1e4d44f64c047944dc31b1692a1e5b1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/jansson@2.14-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-java-srpm-macros-x86-64", "name": "java-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/java-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT-0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 367fafb59cbd6a02034ba8bafdafe9c9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/java-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-json-c-x86-64", "name": "json-c", "versionInfo": "0.18-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/j/json-c-0.18-9.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 6fec8b09fc93d23dba88f03b024fb073"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/json-c@0.18-9.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-headers-x86-64", "name": "kernel-headers", "versionInfo": "7.2.0-61.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/kernel-headers-7.2.0-61.1.hum1.x86_64.rpm", "licenseDeclared": "((GPL-2.0-only WITH Linux-syscall-note) OR BSD-2-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-only WITH Linux-syscall-note) OR CDDL-1.0) AND ((GPL-2.0-only WITH Linux-syscall-note) OR Linux-OpenIB) AND ((GPL-2.0-only WITH Linux-syscall-note) OR MIT) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR BSD-3-Clause) AND ((GPL-2.0-or-later WITH Linux-syscall-note) OR MIT) AND BSD-3-Clause AND (GPL-1.0-or-later WITH Linux-syscall-note) AND GPL-2.0-only AND (GPL-2.0-only WITH Linux-syscall-note) AND (GPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.0-or-later WITH Linux-syscall-note) AND (LGPL-2.1-only WITH Linux-syscall-note) AND (LGPL-2.1-or-later WITH Linux-syscall-note) AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: aadfdd0580fde87fc9b34360fb82a469"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-headers@7.2.0-61.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-kernel-srpm-macros-x86-64", "name": "kernel-srpm-macros", "versionInfo": "1.0-30.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/kernel-srpm-macros-1.0-30.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: d6fe851b8eed59b0b3ed90411974a3f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/kernel-srpm-macros@1.0-30.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-keyutils-libs-x86-64", "name": "keyutils-libs", "versionInfo": "1.6.3-8.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/keyutils-libs-1.6.3-8.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 83cd2236fb6d56defe7beca1256cca78"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/keyutils-libs@1.6.3-8.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-krb5-libs-x86-64", "name": "krb5-libs", "versionInfo": "1.22.2-10.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/k/krb5-libs-1.22.2-10.3.hum1.x86_64.rpm", "licenseDeclared": "Brian-Gladman-2-Clause AND BSD-2-Clause AND (BSD-2-Clause OR GPL-2.0-or-later) AND BSD-2-Clause-first-lines AND BSD-3-Clause AND BSD-4-Clause AND CMU-Mach-nodoc AND FSFULLRWD AND HPND AND HPND-export2-US AND HPND-export-US AND HPND-export-US-acknowledgement AND HPND-export-US-modify AND ISC AND MIT AND MIT-CMU AND OLDAP-2.8 AND OpenVision", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 545278e10134666a8c291499bac221f1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/krb5-libs@1.22.2-10.3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libacl-x86-64", "name": "libacl", "versionInfo": "2.4.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libacl-2.4.0-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 788fb6fac6ab4116feaef2e0300ea57e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libacl@2.4.0-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libarchive-x86-64", "name": "libarchive", "versionInfo": "3.8.9-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libarchive-3.8.9-2.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause AND FSFULLR AND GPL-2.0-or-later WITH Libtool-exception AND BSD-3-Clause AND FSFUL", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: aad0303990bb1b04a5105825aeaf3001"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libarchive@3.8.9-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libassuan-x86-64", "name": "libassuan", "versionInfo": "2.5.7-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libassuan-2.5.7-6.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 059b8af761f036d632500cc22cec31e6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libassuan@2.5.7-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libatomic-x86-64", "name": "libatomic", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libatomic-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 47ab6b5acecd7d6ae9a3eb6615e15c91"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libatomic@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libattr-x86-64", "name": "libattr", "versionInfo": "2.6.0-9.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libattr-2.6.0-9.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: d585f6a64162151c857c9401a1cbf3e0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libattr@2.6.0-9.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libblkid-x86-64", "name": "libblkid", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libblkid-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: c88859e9e7d00ebc2e15e6b98baf950d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libblkid@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libbrotli-x86-64", "name": "libbrotli", "versionInfo": "1.2.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libbrotli-1.2.0-6.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 85f2f47512d9d8f986fb8a1c04cc5aa6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libbrotli@1.2.0-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-ng-x86-64", "name": "libcap-ng", "versionInfo": "0.9.6-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcap-ng-0.9.6-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 5fd3db66052d3df8f713e523c13a955f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap-ng@0.9.6-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcap-x86-64", "name": "libcap", "versionInfo": "2.78-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcap-2.78-2.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 67f4e2e447638ef6423ec37215870ea1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcap@2.78-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcbor-x86-64", "name": "libcbor", "versionInfo": "0.14.0-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcbor-0.14.0-3.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9a33095c506ec5bd6d7c3b525cef087a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcbor@0.14.0-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcom-err-x86-64", "name": "libcom_err", "versionInfo": "1.47.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcom_err-1.47.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: e24ccc4e4b721fc269fa4ded6adba3be"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcom_err@1.47.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libcurl-x86-64", "name": "libcurl", "versionInfo": "8.22.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libcurl-8.22.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "curl", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 1428e163e746597d1e33a36f58c93680"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libcurl@8.22.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libeconf-x86-64", "name": "libeconf", "versionInfo": "0.7.9-4.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libeconf-0.7.9-4.2.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 1ccc14f8674aec8c899ee0eeded54f81"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libeconf@0.7.9-4.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libevent-x86-64", "name": "libevent", "versionInfo": "2.1.13-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libevent-2.1.13-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND ISC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f30ba9b3193b576be7b3da4364c75e55"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libevent@2.1.13-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfdisk-x86-64", "name": "libfdisk", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfdisk-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: bed12a724f795ae4a0f119dd179dd169"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfdisk@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libffi-x86-64", "name": "libffi", "versionInfo": "3.8.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libffi-3.8.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "MIT AND CC-PDDC AND (GPL-3.0-or-later WITH Texinfo-exception)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: bfcd0557f6f7d71f78389a2f255f84ee"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libffi@3.8.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfido2-x86-64", "name": "libfido2", "versionInfo": "1.17.0-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfido2-1.17.0-6.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 8b9b7eff333cbda55fa9d7d24667f672"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfido2@1.17.0-6.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libfsverity-x86-64", "name": "libfsverity", "versionInfo": "1.7-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libfsverity-1.7-4.1.hum1.x86_64.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 372c392dc177e9b4587046fed56f0d6e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libfsverity@1.7-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcc-x86-64", "name": "libgcc", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgcc-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: d9f9b38741e47aa97fa57d4394c05e85"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcc@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgcrypt-x86-64", "name": "libgcrypt", "versionInfo": "1.12.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgcrypt-1.12.4-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND (BSD-3-Clause OR GPL-2.0-only) AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LGPL-2.0-or-later AND MIT-Modern-Variant", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f4bef4bc6a67ba46ac13e78047c07a4a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgcrypt@1.12.4-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgomp-x86-64", "name": "libgomp", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgomp-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9b500e97526ccc46e490b028b56ed8d7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgomp@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libgpg-error-x86-64", "name": "libgpg-error", "versionInfo": "1.61-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libgpg-error-1.61-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND (BSD-3-Clause OR LGPL-2.1-or-later) AND FSFULLR AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: b47f6024eae245a48d6413e5ea9ddd49"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libgpg-error@1.61-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libidn2-x86-64", "name": "libidn2", "versionInfo": "2.3.8-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libidn2-2.3.8-4.1.hum1.x86_64.rpm", "licenseDeclared": "(GPL-2.0-or-later OR LGPL-3.0-or-later) AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 81f930e418fc54a1e008fa2b2ed09873"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libidn2@2.3.8-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libksba-x86-64", "name": "libksba", "versionInfo": "1.8.1-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libksba-1.8.1-1.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND (LGPL-3.0-or-later OR GPL-2.0-or-later)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 791730e4835155fab5a86f2022ad6df6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libksba@1.8.1-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-liblastlog2-x86-64", "name": "liblastlog2", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/liblastlog2-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 3cb1e0b98469b5d3d68474923c0d81f9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/liblastlog2@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmount-x86-64", "name": "libmount", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libmount-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: d37fd9e0844a0a7a78353fbd66fdb31a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmount@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libmpc-x86-64", "name": "libmpc", "versionInfo": "1.4.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libmpc-1.4.1-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-3.0-or-later AND FSFAP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: c553fb50a9da1707322efd91e91901fc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libmpc@1.4.1-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp2-x86-64", "name": "libnghttp2", "versionInfo": "1.69.0-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libnghttp2-1.69.0-6.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 45fc7389fd2b921540a7531e83c70187"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp2@1.69.0-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libnghttp3-x86-64", "name": "libnghttp3", "versionInfo": "1.18.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libnghttp3-1.18.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: d4a67b9f63187cba69ee5cbf3881b097"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libnghttp3@1.18.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpfm-x86-64", "name": "libpfm", "versionInfo": "4.13.0-20.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/updates/44/Everything/x86_64/Packages/l/libpfm-4.13.0-20.fc44.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 8d3340a34243fe94badf7ab91f89d20c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpfm@4.13.0-20.fc44?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpkgconf-x86-64", "name": "libpkgconf", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpkgconf-2.5.1-2.1.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: e74fe8ab012b3d507ee094563d5cfc63"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpkgconf@2.5.1-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libpsl-x86-64", "name": "libpsl", "versionInfo": "0.23.3-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libpsl-0.23.3-1.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 075540620d092a55ab448679a2415dee"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libpsl@0.23.3-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-utils-x86-64", "name": "libselinux-utils", "versionInfo": "3.11-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libselinux-utils-3.11-5.1.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 2a10779a6db7dff145f6ad9849a537dd"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux-utils@3.11-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libselinux-x86-64", "name": "libselinux", "versionInfo": "3.11-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libselinux-3.11-5.1.hum1.x86_64.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: df2dff5bcf4c74661cbdd8c7d8690c9d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libselinux@3.11-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsemanage-x86-64", "name": "libsemanage", "versionInfo": "3.11-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsemanage-3.11-4.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: e315e8f4c05e9ff1a8550c96728143db"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsemanage@3.11-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsepol-x86-64", "name": "libsepol", "versionInfo": "3.11-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsepol-3.11-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 22ccfb73f7b0fa00c7eea35897c331c3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsepol@3.11-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libsmartcols-x86-64", "name": "libsmartcols", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libsmartcols-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 04a86365c7c38a3097c848d8a32de300"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libsmartcols@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-config-x86-64", "name": "libssh-config", "versionInfo": "0.12.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libssh-config-0.12.2-1.1.hum1.noarch.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f26ba5abb68d2fea08f751a8569faa35"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh-config@0.12.2-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libssh-x86-64", "name": "libssh", "versionInfo": "0.12.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libssh-0.12.2-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 2a67c00b820489c0075d8475b6764b45"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libssh@0.12.2-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libstdc++-x86-64", "name": "libstdc++", "versionInfo": "16.2.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libstdc++-16.2.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-3.0-or-later AND (GPL-3.0-or-later WITH GCC-exception-3.1) AND (GPL-3.0-or-later WITH Texinfo-exception) AND (LGPL-2.1-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GCC-exception-2.0) AND (GPL-2.0-or-later WITH GNU-compiler-exception) AND BSL-1.0 AND GFDL-1.3-or-later AND Linux-man-pages-copyleft-2-para AND SunPro AND BSD-1-Clause AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause AND BSD-4-Clause AND BSD-Source-Code AND Zlib AND MIT AND Apache-2.0 AND (Apache-2.0 WITH LLVM-Exception) AND ZPL-2.1 AND ISC AND LicenseRef-Fedora-Public-Domain AND HP-1986 AND curl AND Martin-Birgmeier AND HPND-Markus-Kuhn AND dtoa AND SMLNJ AND AMD-newlib AND OAR AND HPND-merchantability-variant AND HPND-Intel", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 1d29dc0cf0b01c168d3f6f050c84311c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libstdc++@16.2.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtasn1-x86-64", "name": "libtasn1", "versionInfo": "4.21.0-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libtasn1-4.21.0-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 1752b9dd0a834fca70607e8dea809765"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtasn1@4.21.0-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libtool-ltdl-x86-64", "name": "libtool-ltdl", "versionInfo": "2.6.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libtool-ltdl-2.6.2-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later WITH Libtool-exception", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 4ed75e065e82bb447bc9e57a1108063e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libtool-ltdl@2.6.2-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libunistring-x86-64", "name": "libunistring", "versionInfo": "1.1-12.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libunistring-1.1-12.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 58d6c066070b8ba39b68b8ce4475d903"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libunistring@1.1-12.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libusb1-x86-64", "name": "libusb1", "versionInfo": "1.0.30-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libusb1-1.0.30-2.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 3ed4be7f3910f98f9bf6a42d49b5de70"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libusb1@1.0.30-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libuuid-x86-64", "name": "libuuid", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libuuid-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 8c9afb13ed8e067848e0d260a5745c86"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libuuid@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libverto-x86-64", "name": "libverto", "versionInfo": "0.3.2-13.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libverto-0.3.2-13.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 5c04a48b08efca2f367581cf22f3ea79"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libverto@0.3.2-13.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-devel-x86-64", "name": "libxcrypt-devel", "versionInfo": "4.5.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxcrypt-devel-4.5.2-4.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: ccac5efc5f591f331023dbafda4d5a2f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt-devel@4.5.2-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxcrypt-x86-64", "name": "libxcrypt", "versionInfo": "4.5.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxcrypt-4.5.2-4.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND BSD-2-Clause-FreeBSD AND 0BSD AND CC0-1.0 AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: b76c1e01a696f4ec876c524bbf9c21ae"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxcrypt@4.5.2-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libxml2-16-x86-64", "name": "libxml2-16", "versionInfo": "2.15.4-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libxml2-16-2.15.4-1.2.hum1.x86_64.rpm", "licenseDeclared": "MIT AND ISC-Veillard AND W3C", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9371c6f0a380cce6e0df9815a66b5fe3"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libxml2-16@2.15.4-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-libzstd-x86-64", "name": "libzstd", "versionInfo": "1.5.7-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/libzstd-1.5.7-6.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 4607fb5e4380e49438e2b427f64e4bfb"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/libzstd@1.5.7-6.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-linkdupes-x86-64", "name": "linkdupes", "versionInfo": "0.7.3-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/linkdupes-0.7.3-3.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND MIT AND Unicode-DFS-2016 AND (0BSD OR MIT OR Apache-2.0) AND (Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (MIT OR Zlib OR Apache-2.0) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 668820dd70e9efdcf45385d43d320ad1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/linkdupes@0.7.3-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-libs-x86-64", "name": "lua-libs", "versionInfo": "5.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lua-libs-5.5.1-2.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 4d1425525334d76079fe029d8f56b187"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-libs@5.5.1-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lua-srpm-macros-x86-64", "name": "lua-srpm-macros", "versionInfo": "1-18.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lua-srpm-macros-1-18.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 68293f00751e1bc423b0bb2ac4e21221"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lua-srpm-macros@1-18.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-lz4-libs-x86-64", "name": "lz4-libs", "versionInfo": "1.10.0-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/l/lz4-libs-1.10.0-5.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later AND BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f75d082f9eb3ae2757600e466a1d67e8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/lz4-libs@1.10.0-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-make-x86-64", "name": "make", "versionInfo": "1:4.4.1-13.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/make-4.4.1-13.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND LGPL-2.1-or-later AND GFDL-1.3-or-later AND FSFULLR", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 27eaf91e39db926c37a2951709191977"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/make@4.4.1-13.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-meson-srpm-macros-x86-64", "name": "meson-srpm-macros", "versionInfo": "1.12.1-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/meson-srpm-macros-1.12.1-2.hum1.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 7617c98560a327b943961c400248f04b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/meson-srpm-macros@1.12.1-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpdecimal-x86-64", "name": "mpdecimal", "versionInfo": "4.0.1-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/mpdecimal-4.0.1-4.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 170c2028b47e6372d7f4a490d77e9578"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpdecimal@4.0.1-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-mpfr-x86-64", "name": "mpfr", "versionInfo": "4.2.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/m/mpfr-4.2.2-4.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: c8368e2d183100ea0a459e57de84fb6a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/mpfr@4.2.2-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-base-x86-64", "name": "ncurses-base", "versionInfo": "6.6-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ncurses-base-6.6-3.1.hum1.noarch.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: a90d36a4f9603dffe4896cbc1c4c42c0"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-base@6.6-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ncurses-libs-x86-64", "name": "ncurses-libs", "versionInfo": "6.6-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ncurses-libs-6.6-3.1.hum1.x86_64.rpm", "licenseDeclared": "MIT-open-group", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 50f19d0d5fce318dd61f3bf284a61eb8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ncurses-libs@6.6-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-nettle-x86-64", "name": "nettle", "versionInfo": "4.0-5.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/nettle-4.0-5.5.hum1.x86_64.rpm", "licenseDeclared": "LGPL-3.0-or-later OR GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 2732e0a3741ef414c34b156cda9d082b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/nettle@4.0-5.5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-x86-64", "name": "ngtcp2-crypto-ossl", "versionInfo": "1.22.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ngtcp2-crypto-ossl-1.22.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: de381ae81e60f4844b4152a563a7edf1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2-crypto-ossl@1.22.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ngtcp2-x86-64", "name": "ngtcp2", "versionInfo": "1.22.1-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/ngtcp2-1.22.1-3.1.hum1.x86_64.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 83e5fdfe2265869feaadd36c14dd724c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ngtcp2@1.22.1-3.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-npth-x86-64", "name": "npth", "versionInfo": "1.8-5.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/n/npth-1.8-5.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 960ca5a1290fd8277e709962817f2d9b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/npth@1.8-5.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-x86-64", "name": "ocaml-srpm-macros", "versionInfo": "11-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/ocaml-srpm-macros-11-4.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 6d563b597c552c5ce842bdd83b6d8dd1"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/ocaml-srpm-macros@11-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openblas-srpm-macros-x86-64", "name": "openblas-srpm-macros", "versionInfo": "2-23.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openblas-srpm-macros-2-23.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: bf3a7ebbd05d3c09e9712e957b99d3b5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openblas-srpm-macros@2-23.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openldap-x86-64", "name": "openldap", "versionInfo": "2.6.15-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openldap-2.6.15-1.1.hum1.x86_64.rpm", "licenseDeclared": "OLDAP-2.8", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 06f2c8cbb7e975fd13c4755c695ddeca"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openldap@2.6.15-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-x86-64", "name": "openssl-fips-provider-upstream", "versionInfo": "1:3.5.9-0.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openssl-fips-provider-upstream-3.5.9-0.3.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f4f22195d0dd6fc38849c184a87fa7da"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-fips-provider-upstream@3.5.9-0.3.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-openssl-libs-x86-64", "name": "openssl-libs", "versionInfo": "1:3.5.9-0.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/o/openssl-libs-3.5.9-0.3.hum1.x86_64.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: ff278afa03fb60f6e5f5f40eee7aa06a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/openssl-libs@3.5.9-0.3.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-trust-x86-64", "name": "p11-kit-trust", "versionInfo": "0.26.5-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/p11-kit-trust-0.26.5-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 8de88a36ce4be4422ccf3d5985f6ed5f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit-trust@0.26.5-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-p11-kit-x86-64", "name": "p11-kit", "versionInfo": "0.26.5-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/p11-kit-0.26.5-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 7769729a33beed05c5fe3b491ad9c342"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/p11-kit@0.26.5-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-x86-64", "name": "package-notes-srpm-macros", "versionInfo": "0.20-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/package-notes-srpm-macros-0.20-2.hum1.noarch.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 4f6f48e6009eb2455ec194f477f9b058"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/package-notes-srpm-macros@0.20-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pam-libs-x86-64", "name": "pam-libs", "versionInfo": "1.7.2-4.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pam-libs-1.7.2-4.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 45d84f782c6e8ec75d9327ceb3697eac"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pam-libs@1.7.2-4.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-patch-x86-64", "name": "patch", "versionInfo": "2.8-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/patch-2.8-6.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: be9f10dfbcc1294681038d6557685a87"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/patch@2.8-6.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-syntax-x86-64", "name": "pcre2-syntax", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pcre2-syntax-10.49-0.2.hum1.noarch.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 5892ce77122ec3ecfec34fe8679d2737"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2-syntax@10.49-0.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pcre2-x86-64", "name": "pcre2", "versionInfo": "10.49-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pcre2-10.49-0.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND FSFULLR AND X11 AND GPL-2.0-or-later AND FSFAP AND FSFUL AND GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f04405508213c03b1dbc3a06b70e927f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pcre2@10.49-0.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-perl-srpm-macros-x86-64", "name": "perl-srpm-macros", "versionInfo": "1-65.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/perl-srpm-macros-1-65.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 0f8b16c4e63430bcff87cb49fa941740"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/perl-srpm-macros@1-65.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-m4-x86-64", "name": "pkgconf-m4", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-m4-2.5.1-2.1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 2ee038a201817d6d825292dc25c6b873"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-m4@2.5.1-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-x86-64", "name": "pkgconf-pkg-config", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-pkg-config-2.5.1-2.1.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: baedfc689c0d5f9c6057ed88d39e7edc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf-pkg-config@2.5.1-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pkgconf-x86-64", "name": "pkgconf", "versionInfo": "2.5.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pkgconf-2.5.1-2.1.hum1.x86_64.rpm", "licenseDeclared": "ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 835bd1e4bad5b079c83786f583596401"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pkgconf@2.5.1-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-policycoreutils-x86-64", "name": "policycoreutils", "versionInfo": "3.11-2.3.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/policycoreutils-3.11-2.3.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 0996619e6d531018175c763265ebb521"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/policycoreutils@3.11-2.3.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-popt-x86-64", "name": "popt", "versionInfo": "1.19-11.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/popt-1.19-11.2.hum1.x86_64.rpm", "licenseDeclared": "MIT AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: c73e021a5dd1ebcd22f10bb597c28a0f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/popt@1.19-11.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-x86-64", "name": "publicsuffix-list-dafsa", "versionInfo": "20260624-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/publicsuffix-list-dafsa-20260624-2.1.hum1.noarch.rpm", "licenseDeclared": "MPL-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 258b22e06326223e99678d8138bba57d"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/publicsuffix-list-dafsa@20260624-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-x86-64", "name": "pyproject-srpm-macros", "versionInfo": "1.23.2-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/pyproject-srpm-macros-1.23.2-1.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: e82edc55e5be2f520af44c2b0337e92a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/pyproject-srpm-macros@1.23.2-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-pip-wheel-x86-64", "name": "python-pip-wheel", "versionInfo": "26.2-0.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python-pip-wheel-26.2-0.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND Python-2.0.1 AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MPL-2.0 AND (Apache-2.0 OR BSD-2-Clause)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 30b1136e6baf2dc70c7e01a45cf96050"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-pip-wheel@26.2-0.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python-srpm-macros-x86-64", "name": "python-srpm-macros", "versionInfo": "3.14-12.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python-srpm-macros-3.14-12.2.hum1.noarch.rpm", "licenseDeclared": "MIT AND PSF-2.0 AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 618d0c006548a702f22df8ec49dca3a5"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python-srpm-macros@3.14-12.2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-boolean.py-x86-64", "name": "python3-boolean.py", "versionInfo": "5.0-10.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/python3-boolean.py-5.0-10.fc44.noarch.rpm", "licenseDeclared": "NOASSERTION", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: b7af00dcc3668fd56d3b09f1f1b171a9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-boolean.py@5.0-10.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-libs-x86-64", "name": "python3-libs", "versionInfo": "3.14.8-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python3-libs-3.14.8-1.1.hum1.x86_64.rpm", "licenseDeclared": "Python-2.0.1 AND MIT AND BSD-3-Clause AND MIT-CMU AND HPND-SMC AND BSD-2-Clause AND dtoa AND Unicode-3.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: af65a70be9a4388459abf914c4d6d866"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-libs@3.14.8-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-license-expression-x86-64", "name": "python3-license-expression", "versionInfo": "30.4.4-4.fc44", "downloadLocation": "https://koji-s3-cache.hummingbird-project.io/download-ib01.fedoraproject.org/pub/fedora/linux/releases/44/Everything/x86_64/os/Packages/p/python3-license-expression-30.4.4-4.fc44.noarch.rpm", "licenseDeclared": "Apache-2.0", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 009ffab3cc792b96ce398d6c97aa5a0a"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3-license-expression@30.4.4-4.fc44?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-python3-x86-64", "name": "python3", "versionInfo": "3.14.8-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/p/python3-3.14.8-1.1.hum1.x86_64.rpm", "licenseDeclared": "Python-2.0.1", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 372e28a8b7ffa76c497a0c91cc712157"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/python3@3.14.8-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt5-srpm-macros-x86-64", "name": "qt5-srpm-macros", "versionInfo": "5.15.18-3.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/q/qt5-srpm-macros-5.15.18-3.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 4ffb52b3bdf4017e6c58f49b621e1c54"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt5-srpm-macros@5.15.18-3.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-qt6-srpm-macros-x86-64", "name": "qt6-srpm-macros", "versionInfo": "6.11.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/q/qt6-srpm-macros-6.11.2-1.1.hum1.noarch.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 8478ebf3654d031de2c0964fb1f5d8a2"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/qt6-srpm-macros@6.11.2-1.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-readline-x86-64", "name": "readline", "versionInfo": "8.3-7.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/readline-8.3-7.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later AND GPL-2.0-or-later AND GFDL-1.3-no-invariants-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 6d5f55d88397da5ff5d6d44c166e44ad"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/readline@8.3-7.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-redhat-rpm-config-x86-64", "name": "redhat-rpm-config", "versionInfo": "345-4.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/redhat-rpm-config-345-4.hum1.noarch.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-or-later AND GPL-3.0-or-later WITH Autoconf-exception-generic", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9e9b9de801d40d8b16d77058da82cde9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/redhat-rpm-config@345-4.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-libs-x86-64", "name": "rpm-build-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-build-libs-6.1.0-1.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 0baa922ad9c3e1ad095fd9d12e2394d7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build-libs@6.1.0-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-build-x86-64", "name": "rpm-build", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-build-6.1.0-1.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 67fc91cbee116e35e8237d0612cac73b"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-build@6.1.0-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-libs-x86-64", "name": "rpm-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-libs-6.1.0-1.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later OR LGPL-2.1-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f7db1d0e666bf1f6bab0f26286b4eb97"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-libs@6.1.0-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-x86-64", "name": "rpm-plugin-selinux", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-plugin-selinux-6.1.0-1.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 8cf4d7f735c2924dcd228c6c77bd9c78"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-plugin-selinux@6.1.0-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sequoia-x86-64", "name": "rpm-sequoia", "versionInfo": "1.10.1.1-1.5.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-sequoia-1.10.1.1-1.5.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.0-or-later AND Apache-2.0 AND BSL-1.0 AND MIT AND Unicode-DFS-2016 AND (Apache-2.0 OR MIT) AND (MIT OR Apache-2.0 OR Zlib) AND (Unlicense OR MIT)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 5cf9f6fd1ce035bcea5b932aa655b4e9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sequoia@1.10.1.1-1.5.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-sign-libs-x86-64", "name": "rpm-sign-libs", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-sign-libs-6.1.0-1.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 82522c636e596baf9494cc2cf675e6b9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm-sign-libs@6.1.0-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rpm-x86-64", "name": "rpm", "versionInfo": "6.1.0-1.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rpm-6.1.0-1.2.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 7be6cc60a527bea3108257110ef7386f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rpm@6.1.0-1.2.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-rust-srpm-macros-x86-64", "name": "rust-srpm-macros", "versionInfo": "28.5-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/r/rust-srpm-macros-28.5-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 606a7a2166723ba0e3515fa8244596dc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/rust-srpm-macros@28.5-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sed-x86-64", "name": "sed", "versionInfo": "4.10-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/sed-4.10-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: b7e0ef816a5a8405eb5ecbeead8b8387"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sed@4.10-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-targeted-x86-64", "name": "selinux-policy-targeted", "versionInfo": "45.21-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/selinux-policy-targeted-45.21-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: afd3a0e6066718b6633918ff5031c1ce"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy-targeted@45.21-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-selinux-policy-x86-64", "name": "selinux-policy", "versionInfo": "45.21-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/selinux-policy-45.21-1.hum1.noarch.rpm", "licenseDeclared": "GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 910958d9c5c1913d447a1e64fb0ad0b6"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/selinux-policy@45.21-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-setup-x86-64", "name": "setup", "versionInfo": "2.15.1-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/setup-2.15.1-2.1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 7306efa4649c49f3d249269ae6781e58"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/setup@2.15.1-2.1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-shadow-utils-x86-64", "name": "shadow-utils", "versionInfo": "2:4.20.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/shadow-utils-4.20.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: a40baacbe274a1fd7467dafc995fc06f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/shadow-utils@4.20.0-1.1.hum1?arch=x86_64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-sqlite-libs-x86-64", "name": "sqlite-libs", "versionInfo": "3.54.0-0.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/sqlite-libs-3.54.0-0.1.hum1.x86_64.rpm", "licenseDeclared": "blessing", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: d180ffce66ebf07fa47f35fb7f173cc8"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/sqlite-libs@3.54.0-0.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-libs-x86-64", "name": "systemd-libs", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-libs-261.2-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 63d4edd2cfd94aca76095674502f3a39"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-libs@261.2-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-x86-64", "name": "systemd-standalone-sysusers", "versionInfo": "261.2-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/s/systemd-standalone-sysusers-261.2-1.1.hum1.x86_64.rpm", "licenseDeclared": "LGPL-2.1-or-later AND MIT AND GPL-2.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 0c32ee07c90e4e4e482a2e2ba7fc9909"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/systemd-standalone-sysusers@261.2-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tar-x86-64", "name": "tar", "versionInfo": "2:1.35-10.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tar-1.35-10.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-or-later", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 30d2b9bafd2631253a3cc376a8bb5895"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tar@1.35-10.1.hum1?arch=x86_64&epoch=2"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tpm2-tss-x86-64", "name": "tpm2-tss", "versionInfo": "4.2.0-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tpm2-tss-4.2.0-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 945a1dbae0e23df3e0c036c7be3c6ed9"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tpm2-tss@4.2.0-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-x86-64", "name": "tree-sitter-srpm-macros", "versionInfo": "0.4.6-2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tree-sitter-srpm-macros-0.4.6-2.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f65af17df28df341ec383338fcc47481"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tree-sitter-srpm-macros@0.4.6-2.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-tzdata-x86-64", "name": "tzdata", "versionInfo": "2026e-1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/t/tzdata-2026e-1.hum1.noarch.rpm", "licenseDeclared": "LicenseRef-Fedora-Public-Domain AND (GPL-2.0-only WITH ClassPath-exception-2.0)", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: a1336045dee9a14e5ecb98f2e75ca023"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/tzdata@2026e-1.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-unzip-x86-64", "name": "unzip", "versionInfo": "6.0-71.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/unzip-6.0-71.1.hum1.x86_64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 581811ac7611115e3a061c6a9742e6cc"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/unzip@6.0-71.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-core-x86-64", "name": "util-linux-core", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/util-linux-core-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-2.0-only AND GPL-2.0-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 65e6bb5ce193e259db92b1da1458a9f7"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux-core@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-util-linux-x86-64", "name": "util-linux", "versionInfo": "2.42.4-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/u/util-linux-2.42.4-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-3.0-or-later AND LGPL-2.1-or-later AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 9e691eac5b01ac766ab95d8f44e0f34c"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/util-linux@2.42.4-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-which-x86-64", "name": "which", "versionInfo": "2.25-2.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/w/which-2.25-2.1.hum1.x86_64.rpm", "licenseDeclared": "GPL-3.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 6892b8bc6b61b94591d2d36efcbbb863"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/which@2.25-2.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xxhash-libs-x86-64", "name": "xxhash-libs", "versionInfo": "0.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xxhash-libs-0.8.4-1.1.hum1.x86_64.rpm", "licenseDeclared": "BSD-2-Clause", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 3d91a1be44d587bb71ff080ac2b8c588"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xxhash-libs@0.8.4-1.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-libs-x86-64", "name": "xz-libs", "versionInfo": "1:5.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xz-libs-5.8.4-1.1.hum1.x86_64.rpm", "licenseDeclared": "0BSD", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: f53b834106c4229e7ba3483e9bafb67f"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz-libs@5.8.4-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-xz-x86-64", "name": "xz", "versionInfo": "1:5.8.4-1.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/x/xz-5.8.4-1.1.hum1.x86_64.rpm", "licenseDeclared": "0BSD AND GPL-2.0-or-later AND LicenseRef-Fedora-Public-Domain", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: e2e7b3e9e3c31d3d1fda36dd4704d919"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/xz@5.8.4-1.1.hum1?arch=x86_64&epoch=1"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zig-srpm-macros-x86-64", "name": "zig-srpm-macros", "versionInfo": "1-9.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zig-srpm-macros-1-9.hum1.noarch.rpm", "licenseDeclared": "MIT", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 0c226eb1fa4d5fc3d272055b6397b077"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zig-srpm-macros@1-9.hum1?arch=noarch"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zip-x86-64", "name": "zip", "versionInfo": "3.0-46.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zip-3.0-46.1.hum1.x86_64.rpm", "licenseDeclared": "Info-ZIP", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 06b1fc2c4bd5655fd89e389c6b0afa05"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zip@3.0-46.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zlib-ng-compat-x86-64", "name": "zlib-ng-compat", "versionInfo": "2.3.3-6.1.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zlib-ng-compat-2.3.3-6.1.hum1.x86_64.rpm", "licenseDeclared": "Zlib", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: 6f0531e35b9ec4b90b2a3d2debc0c51e"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zlib-ng-compat@2.3.3-6.1.hum1?arch=x86_64"}]}, {"SPDXID": "SPDXRef-Buildroot-Package-zstd-x86-64", "name": "zstd", "versionInfo": "1.5.7-6.2.hum1", "downloadLocation": "https://packages.redhat.com/api/pulp-content/public-hummingbird/x86_64/Packages/z/zstd-1.5.7-6.2.hum1.x86_64.rpm", "licenseDeclared": "BSD-3-Clause OR GPL-2.0-only", "filesAnalyzed": false, "supplier": "Organization: Fedora", "annotations": [{"annotationType": "OTHER", "annotator": "Tool: Konflux", "annotationDate": "2026-10-12T07:43:19Z", "comment": "sigmd5: ea2450a029df76814e66045458cf3d03"}], "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/redhat/zstd@1.5.7-6.2.hum1?arch=x86_64"}]}, {"name": "cel.dev/expr", "SPDXID": "SPDXRef-Package-go-module-cel.dev-expr-c51cdb5526844269", "versionInfo": "v0.25.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cel.dev/expr@v0.25.2"}]}, {"name": "cloud.google.com/go", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-9328957379bce3d0", "versionInfo": "v0.123.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go@v0.123.0"}]}, {"name": "cloud.google.com/go/auth", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-1786985fe20e8463", "versionInfo": "v0.23.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth:v0.23.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.23.2"}]}, {"name": "cloud.google.com/go/auth/oauth2adapt", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-4e1dff3a24ef602e", "versionInfo": "v0.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth\\/oauth2adapt:v0.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.2.8#oauth2adapt"}]}, {"name": "cloud.google.com/go/compute/metadata", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-d86ba323c64dbbad", "versionInfo": "v0.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:compute\\/metadata:v0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/compute@v0.9.0#metadata"}]}, {"name": "cloud.google.com/go/iam", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-iam-217394b61df67b35", "versionInfo": "v1.12.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:iam:v1.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/iam@v1.12.0"}]}, {"name": "cloud.google.com/go/monitoring", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-6135ad05f5840660", "versionInfo": "v1.30.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:monitoring:v1.30.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/monitoring@v1.30.0"}]}, {"name": "cloud.google.com/go/storage", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-storage-0e962535eb1d6d77", "versionInfo": "v1.65.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:storage:v1.65.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/storage@v1.65.1"}]}, {"name": "dario.cat/mergo", "SPDXID": "SPDXRef-Package-go-module-dario.cat-mergo-a828b7a20f2b35ae", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/dario.cat/mergo@v1.0.2"}]}, {"name": "github.com/BurntSushi/toml", "SPDXID": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-b707544d69ad9c1d", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:BurntSushi:toml:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/BurntSushi/toml@v1.6.0"}]}, {"name": "github.com/CycloneDX/cyclonedx-go", "SPDXID": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-08272dfe2a9d62a9", "versionInfo": "v0.12.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:CycloneDX:cyclonedx-go:v0.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:CycloneDX:cyclonedx_go:v0.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/CycloneDX/cyclonedx-go@v0.12.0"}]}, {"name": "github.com/DataDog/zstd", "SPDXID": "SPDXRef-Package-go-module-github.com-DataDog-zstd-62294839c4d8335a", "versionInfo": "v1.5.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:DataDog:zstd:v1.5.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/DataDog/zstd@v1.5.5"}]}, {"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp", "SPDXID": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-8f8858fcffab4cfb", "versionInfo": "v1.33.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/detectors\\/gcp:v1.33.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/detectors\\/gcp:v1.33.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go@v1.33.0#detectors/gcp"}]}, {"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric", "SPDXID": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-fa7da59cede61c74", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/exporter\\/metric:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/exporter\\/metric:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go@v0.57.0#exporter/metric"}]}, {"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping", "SPDXID": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-b855b0975869d3d9", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/internal\\/resourcemapping:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/internal\\/resourcemapping:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go@v0.57.0#internal/resourcemapping"}]}, {"name": "github.com/Masterminds/goutils", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-9950f1c270973641", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goutils_project:goutils:v1.1.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/goutils@v1.1.1"}]}, {"name": "github.com/Masterminds/semver/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-e1291ae11a591e3e", "versionInfo": "v3.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:semver\\/v3:v3.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/semver@v3.5.0#v3"}]}, {"name": "github.com/Masterminds/sprig/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-fde02eb8ab2b973f", "versionInfo": "v3.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:sprig\\/v3:v3.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/sprig@v3.3.0#v3"}]}, {"name": "github.com/OneOfOne/xxhash", "SPDXID": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-3529122dd1a0ce95", "versionInfo": "v1.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:OneOfOne:xxhash:v1.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/OneOfOne/xxhash@v1.2.8"}]}, {"name": "github.com/ProtonMail/go-crypto", "SPDXID": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-3c2913b329bf0e46", "versionInfo": "v1.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go-crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go_crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ProtonMail/go-crypto@v1.4.1"}]}, {"name": "github.com/STARRY-S/zip", "SPDXID": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-65573bc9e27ef698", "versionInfo": "v0.2.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:STARRY-S:zip:v0.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:STARRY_S:zip:v0.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:STARRY:zip:v0.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/STARRY-S/zip@v0.2.3"}]}, {"name": "github.com/acarl005/stripansi", "SPDXID": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-1b8d1673179391d5", "versionInfo": "v0.0.0-20180116102854-5a71ef0e047d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:acarl005:stripansi:v0.0.0-20180116102854-5a71ef0e047d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/acarl005/stripansi@v0.0.0-20180116102854-5a71ef0e047d"}]}, {"name": "github.com/acobaugh/osrelease", "SPDXID": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-e508fc318cac6c69", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:acobaugh:osrelease:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/acobaugh/osrelease@v0.1.0"}]}, {"name": "github.com/adrg/xdg", "SPDXID": "SPDXRef-Package-go-module-github.com-adrg-xdg-7700b4c9ca27d4e5", "versionInfo": "v0.5.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:adrg:xdg:v0.5.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/adrg/xdg@v0.5.3"}]}, {"name": "github.com/agext/levenshtein", "SPDXID": "SPDXRef-Package-go-module-github.com-agext-levenshtein-23ccf49810981b23", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:agext:levenshtein:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/agext/levenshtein@v1.2.1"}]}, {"name": "github.com/anchore/bubbly", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-bubbly-a6fe84af298c6fcf", "versionInfo": "v0.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:bubbly:v0.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/bubbly@v0.2.2"}]}, {"name": "github.com/anchore/clio", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-clio-e1548c7c53872193", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:clio:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/clio@v0.1.1"}]}, {"name": "github.com/anchore/fangs", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-fangs-e36edb4a0a568dd8", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:fangs:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/fangs@v0.1.1"}]}, {"name": "github.com/anchore/go-collections", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-collections-ca8816aeb1cc97de", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-collections:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_collections:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-collections@v0.1.1"}]}, {"name": "github.com/anchore/go-homedir", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-28c01e0a3249d202", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-homedir:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_homedir:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-homedir@v0.1.1"}]}, {"name": "github.com/anchore/go-logger", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-logger-65f5a5bfb8da9b54", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-logger:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_logger:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-logger@v0.2.0"}]}, {"name": "github.com/anchore/go-lzo", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-1e0e7735477db07a", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-lzo:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_lzo:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-lzo@v0.1.1"}]}, {"name": "github.com/anchore/go-macholibre", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-70f0fd0c7cbb962b", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-macholibre:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_macholibre:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-macholibre@v0.1.1"}]}, {"name": "github.com/anchore/go-rpmdb", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-7631d834cbc8c9f3", "versionInfo": "v0.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-rpmdb:v0.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_rpmdb:v0.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-rpmdb@v0.2.2"}]}, {"name": "github.com/anchore/go-struct-converter", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-f7af8d7b506103af", "versionInfo": "v0.2.0-rc2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-struct-converter:v0.2.0-rc2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_struct_converter:v0.2.0-rc2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-struct-converter@v0.2.0-rc2"}]}, {"name": "github.com/anchore/go-sync", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-sync-45ece7f6c6603600", "versionInfo": "v0.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-sync:v0.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_sync:v0.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-sync@v0.1.2"}]}, {"name": "github.com/anchore/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-version-2d8a07a3a5a38b80", "versionInfo": "v1.2.2-0.20200701162849-18adb9c92b9b", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-version:v1.2.2-0.20200701162849-18adb9c92b9b:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_version:v1.2.2-0.20200701162849-18adb9c92b9b:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-version@v1.2.2-0.20200701162849-18adb9c92b9b"}]}, {"name": "github.com/anchore/packageurl-go", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-5ed41e5e0385b784", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:packageurl-go:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:packageurl_go:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/packageurl-go@v0.2.0"}]}, {"name": "github.com/anchore/stereoscope", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-0a299aeb42f049e9", "versionInfo": "v0.3.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:stereoscope:v0.3.4:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/stereoscope@v0.3.4"}]}, {"name": "github.com/anchore/syft", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "versionInfo": "v1.54.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:syft:v1.54.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/syft@v1.54.1"}]}, {"name": "github.com/andybalholm/brotli", "SPDXID": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-23bf819395a6ff79", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:andybalholm:brotli:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/andybalholm/brotli@v1.2.0"}]}, {"name": "github.com/apparentlymart/go-textseg/v15", "SPDXID": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-f25e63361fe42e75", "versionInfo": "v15.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go-textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go_textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/apparentlymart/go-textseg@v15.0.0#v15"}]}, {"name": "github.com/apparentlymart/go-textseg/v17", "SPDXID": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v17-3a6d9ea43f41f68f", "versionInfo": "v17.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go-textseg\\/v17:v17.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go_textseg\\/v17:v17.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/apparentlymart/go-textseg@v17.0.1#v17"}]}, {"name": "github.com/aquasecurity/go-pep440-version", "SPDXID": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-16fc305df3ee74ff", "versionInfo": "v0.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go-pep440-version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go_pep440_version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aquasecurity/go-pep440-version@v0.0.1"}]}, {"name": "github.com/aquasecurity/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-9d0a0ec6eb3d73de", "versionInfo": "v0.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go-version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go_version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aquasecurity/go-version@v0.0.1"}]}, {"name": "github.com/aws/aws-sdk-go-v2", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-f95186686590259f", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.44.0"}]}, {"name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-a123a3a958520bf1", "versionInfo": "v1.7.20", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/aws\\/protocol\\/eventstream:v1.7.20:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/aws\\/protocol\\/eventstream:v1.7.20:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.7.20#aws/protocol/eventstream"}]}, {"name": "github.com/aws/aws-sdk-go-v2/config", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-13054f483e4c1dd6", "versionInfo": "v1.32.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/config:v1.32.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/config:v1.32.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.32.40#config"}]}, {"name": "github.com/aws/aws-sdk-go-v2/credentials", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-706dd59bec86085d", "versionInfo": "v1.19.39", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/credentials:v1.19.39:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/credentials:v1.19.39:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.19.39#credentials"}]}, {"name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-4891d2811cc84108", "versionInfo": "v1.18.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/feature\\/ec2\\/imds:v1.18.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/feature\\/ec2\\/imds:v1.18.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.18.40#feature/ec2/imds"}]}, {"name": "github.com/aws/aws-sdk-go-v2/internal/configsources", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-b61857513bdd834d", "versionInfo": "v1.4.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/configsources:v1.4.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/configsources:v1.4.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.4.40#internal/configsources"}]}, {"name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-1c2706937f83fd02", "versionInfo": "v2.7.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/endpoints\\/v2:v2.7.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/endpoints\\/v2:v2.7.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v2.7.40#internal/endpoints/v2"}]}, {"name": "github.com/aws/aws-sdk-go-v2/internal/v4a", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-aee470da722808bb", "versionInfo": "v1.4.41", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/v4a:v1.4.41:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/v4a:v1.4.41:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.4.41#internal/v4a"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-46e536c3b767664a", "versionInfo": "v1.13.19", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/accept-encoding:v1.13.19:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/accept_encoding:v1.13.19:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.13.19#service/internal/accept-encoding"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-2eb483d71a720099", "versionInfo": "v1.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/checksum:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/checksum:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.10.0#service/internal/checksum"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-62e2eda7731e5dbf", "versionInfo": "v1.13.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/presigned-url:v1.13.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/presigned_url:v1.13.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.13.40#service/internal/presigned-url"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-637c10788573241e", "versionInfo": "v1.19.41", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/s3shared:v1.19.41:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/s3shared:v1.19.41:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.19.41#service/internal/s3shared"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/s3", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-cf5a8de2c80af304", "versionInfo": "v1.108.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/s3:v1.108.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/s3:v1.108.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.108.0#service/s3"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/signin", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-a2da7ee7f11b869a", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/signin:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/signin:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.6.0#service/signin"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/sso", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-5a422b6636245a14", "versionInfo": "v1.34.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sso:v1.34.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sso:v1.34.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.34.0#service/sso"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/ssooidc", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-cfe5984e56fadd09", "versionInfo": "v1.39.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ssooidc:v1.39.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ssooidc:v1.39.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.39.0#service/ssooidc"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/sts", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-a0e4ab4c9a750b0a", "versionInfo": "v1.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sts:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sts:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.46.0#service/sts"}]}, {"name": "github.com/aws/smithy-go", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-smithy-go-18809bf13de32b86", "versionInfo": "v1.28.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:smithy-go:v1.28.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:smithy_go:v1.28.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/smithy-go@v1.28.1"}]}, {"name": "github.com/aymanbagabas/go-osc52/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-a66f37acef129a31", "versionInfo": "v2.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aymanbagabas:go-osc52\\/v2:v2.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aymanbagabas:go_osc52\\/v2:v2.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aymanbagabas/go-osc52@v2.0.1#v2"}]}, {"name": "github.com/becheran/wildmatch-go", "SPDXID": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-f7dcc97b892f71c3", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:becheran:wildmatch-go:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:becheran:wildmatch_go:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/becheran/wildmatch-go@v1.0.0"}]}, {"name": "github.com/bgentry/go-netrc", "SPDXID": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-c1416f11c9aacbdf", "versionInfo": "v0.0.0-20140422174119-9fd32a8b3d3d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bgentry:go-netrc:v0.0.0-20140422174119-9fd32a8b3d3d:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bgentry:go_netrc:v0.0.0-20140422174119-9fd32a8b3d3d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bgentry/go-netrc@v0.0.0-20140422174119-9fd32a8b3d3d"}]}, {"name": "github.com/bitnami/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-bitnami-go-version-3fda0eed7792f6a5", "versionInfo": "v0.0.0-20250131085805-b1f57a8634ef", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bitnami:go-version:v0.0.0-20250131085805-b1f57a8634ef:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bitnami:go_version:v0.0.0-20250131085805-b1f57a8634ef:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bitnami/go-version@v0.0.0-20250131085805-b1f57a8634ef"}]}, {"name": "github.com/blakesmith/ar", "SPDXID": "SPDXRef-Package-go-module-github.com-blakesmith-ar-8bdf2613989cf223", "versionInfo": "v0.0.0-20190502131153-809d4375e1fb", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:blakesmith:ar:v0.0.0-20190502131153-809d4375e1fb:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/blakesmith/ar@v0.0.0-20190502131153-809d4375e1fb"}]}, {"name": "github.com/bmatcuk/doublestar/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-2ca9c295eae69dae", "versionInfo": "v4.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bmatcuk:doublestar\\/v4:v4.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bmatcuk/doublestar@v4.10.2#v4"}]}, {"name": "github.com/bodgit/plumbing", "SPDXID": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-0d1286ac0499afba", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bodgit:plumbing:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bodgit/plumbing@v1.3.0"}]}, {"name": "github.com/bodgit/sevenzip", "SPDXID": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-ac153d98426e26be", "versionInfo": "v1.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bodgit:sevenzip:v1.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bodgit/sevenzip@v1.6.1"}]}, {"name": "github.com/bodgit/windows", "SPDXID": "SPDXRef-Package-go-module-github.com-bodgit-windows-a53f86ad3503eb61", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bodgit:windows:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bodgit/windows@v1.0.1"}]}, {"name": "github.com/cespare/xxhash/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-38dcd7577306480b", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cespare/xxhash@v2.3.0#v2"}]}, {"name": "github.com/charmbracelet/bubbles", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-f419cdb31ec96663", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:bubbles:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/bubbles@v1.0.0"}]}, {"name": "github.com/charmbracelet/bubbletea", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-4aed4031373b7c9a", "versionInfo": "v1.3.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:bubbletea:v1.3.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/bubbletea@v1.3.10"}]}, {"name": "github.com/charmbracelet/colorprofile", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-1f853230f5dad2ee", "versionInfo": "v0.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:colorprofile:v0.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/colorprofile@v0.4.3"}]}, {"name": "github.com/charmbracelet/harmonica", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-e245b026512336f6", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:harmonica:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/harmonica@v0.2.0"}]}, {"name": "github.com/charmbracelet/lipgloss", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-79da1b85907959db", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:lipgloss:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/lipgloss@v1.1.0"}]}, {"name": "github.com/charmbracelet/x/ansi", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-a97cc5738423fcee", "versionInfo": "v0.11.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:x\\/ansi:v0.11.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/x@v0.11.6#ansi"}]}, {"name": "github.com/charmbracelet/x/cellbuf", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-a4dff55bfd12a3ee", "versionInfo": "v0.0.15", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:x\\/cellbuf:v0.0.15:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/x@v0.0.15#cellbuf"}]}, {"name": "github.com/charmbracelet/x/term", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-9c422284a54f0cb1", "versionInfo": "v0.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:x\\/term:v0.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/x@v0.2.2#term"}]}, {"name": "github.com/clipperhouse/displaywidth", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-16b53d9d918126db", "versionInfo": "v0.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:displaywidth:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/displaywidth@v0.11.0"}]}, {"name": "github.com/clipperhouse/uax29/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-0b77caf80ea0511d", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:uax29\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/uax29@v2.7.0#v2"}]}, {"name": "github.com/cloudflare/circl", "SPDXID": "SPDXRef-Package-go-module-github.com-cloudflare-circl-5a3c1efca0c90f44", "versionInfo": "v1.6.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cloudflare:circl:v1.6.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cloudflare/circl@v1.6.3"}]}, {"name": "github.com/cncf/xds/go", "SPDXID": "SPDXRef-Package-go-module-github.com-cncf-xds-go-601ebdf5859e15e8", "versionInfo": "v0.0.0-20260202195803-dba9d589def2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cncf:xds\\/go:v0.0.0-20260202195803-dba9d589def2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cncf/xds@v0.0.0-20260202195803-dba9d589def2#go"}]}, {"name": "github.com/containerd/containerd/api", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-a247c88c111787d0", "versionInfo": "v1.12.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:containerd\\/api:v1.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/containerd@v1.12.0#api"}]}, {"name": "github.com/containerd/containerd/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-f18be99a242092aa", "versionInfo": "v2.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:containerd\\/v2:v2.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/containerd@v2.4.1#v2"}]}, {"name": "github.com/containerd/continuity", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-continuity-808e446feeb7ed05", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:continuity:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/continuity@v0.5.0"}]}, {"name": "github.com/containerd/errdefs", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-837058d2467dabcb", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v1.0.0"}]}, {"name": "github.com/containerd/errdefs/pkg", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-dd51a7c468cd0634", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs\\/pkg:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v0.3.0#pkg"}]}, {"name": "github.com/containerd/fifo", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-fifo-31a6c54e4b8a25b2", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:fifo:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/fifo@v1.1.0"}]}, {"name": "github.com/containerd/log", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-log-c460e4da1757894f", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:log:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/log@v0.2.0"}]}, {"name": "github.com/containerd/log/otel", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-log-otel-11e2722d3ca9a4ef", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:log\\/otel:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/log@v0.1.0#otel"}]}, {"name": "github.com/containerd/platforms", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-platforms-fa522217d7b3f08b", "versionInfo": "v1.0.0-rc.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:platforms:v1.0.0-rc.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.5"}]}, {"name": "github.com/containerd/plugin", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-plugin-9141beff018cfab8", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:plugin:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/plugin@v1.1.0"}]}, {"name": "github.com/containerd/ttrpc", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-e972f0407c503d2a", "versionInfo": "v1.2.9", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:ttrpc:v1.2.9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/ttrpc@v1.2.9"}]}, {"name": "github.com/containerd/typeurl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-7a0a93b245a3d892", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:typeurl\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/typeurl@v2.3.0#v2"}]}, {"name": "github.com/cyphar/filepath-securejoin", "SPDXID": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-f329a37d4f34823b", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath-securejoin:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath_securejoin:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.7.0"}]}, {"name": "github.com/deitch/magic", "SPDXID": "SPDXRef-Package-go-module-github.com-deitch-magic-4401d798566c6f7b", "versionInfo": "v0.0.0-20230404182410-1ff89d7342da", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:deitch:magic:v0.0.0-20230404182410-1ff89d7342da:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/deitch/magic@v0.0.0-20230404182410-1ff89d7342da"}]}, {"name": "github.com/diskfs/go-diskfs", "SPDXID": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-120e864e11f182fc", "versionInfo": "v1.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:diskfs:go-diskfs:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:diskfs:go_diskfs:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/diskfs/go-diskfs@v1.9.4"}]}, {"name": "github.com/distribution/reference", "SPDXID": "SPDXRef-Package-go-module-github.com-distribution-reference-2c716bc63d930d89", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:distribution:reference:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/distribution/reference@v0.6.0"}]}, {"name": "github.com/docker/cli", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-cli-6d2657fdcb9ebcb0", "versionInfo": "v29.8.2+incompatible", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:cli:v29.8.2\\+incompatible:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/cli@v29.8.2%2Bincompatible"}]}, {"name": "github.com/docker/docker-credential-helpers", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-19361100f0dde74c", "versionInfo": "v0.9.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.8"}]}, {"name": "github.com/docker/go-connections", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-connections-fecf7c9a36147246", "versionInfo": "v0.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-connections@v0.8.1"}]}, {"name": "github.com/docker/go-units", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-units-e85382ab0da19c2d", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-units@v0.5.0"}]}, {"name": "github.com/dsnet/compress", "SPDXID": "SPDXRef-Package-go-module-github.com-dsnet-compress-9f3b150e292e3c5b", "versionInfo": "v0.0.2-0.20230904184137-39efe44ab707", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dsnet:compress:v0.0.2-0.20230904184137-39efe44ab707:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/dsnet/compress@v0.0.2-0.20230904184137-39efe44ab707"}]}, {"name": "github.com/dustin/go-humanize", "SPDXID": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-404980ce1fd77308", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dustin:go-humanize:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dustin:go_humanize:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/dustin/go-humanize@v1.1.0"}]}, {"name": "github.com/elliotchance/phpserialize", "SPDXID": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-2523bb38577185bf", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:elliotchance:phpserialize:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/elliotchance/phpserialize@v1.4.0"}]}, {"name": "github.com/emirpasic/gods", "SPDXID": "SPDXRef-Package-go-module-github.com-emirpasic-gods-169d5950ee056b4e", "versionInfo": "v1.18.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:emirpasic:gods:v1.18.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/emirpasic/gods@v1.18.1"}]}, {"name": "github.com/envoyproxy/go-control-plane/envoy", "SPDXID": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-05d9b2aa62e5ad11", "versionInfo": "v1.37.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:go-control-plane\\/envoy:v1.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:go_control_plane\\/envoy:v1.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/envoyproxy/go-control-plane@v1.37.0#envoy"}]}, {"name": "github.com/envoyproxy/protoc-gen-validate", "SPDXID": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-557df6bbb5c1c4cb", "versionInfo": "v1.3.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3"}]}, {"name": "github.com/facebookincubator/nvdtools", "SPDXID": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-fc848e8ff018564a", "versionInfo": "v0.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:facebookincubator:nvdtools:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/facebookincubator/nvdtools@v0.1.5"}]}, {"name": "github.com/fatih/color", "SPDXID": "SPDXRef-Package-go-module-github.com-fatih-color-dd7803a0c37fda79", "versionInfo": "v1.19.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fatih:color:v1.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fatih/color@v1.19.0"}]}, {"name": "github.com/felixge/fgprof", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-fgprof-b3688822ef8f76dc", "versionInfo": "v0.9.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:fgprof:v0.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/fgprof@v0.9.5"}]}, {"name": "github.com/felixge/httpsnoop", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-431f5c8f5ac735d2", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.1.0"}]}, {"name": "github.com/fsnotify/fsnotify", "SPDXID": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-93584e6c3bd0f521", "versionInfo": "v1.10.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1"}]}, {"name": "github.com/gabriel-vasile/mimetype", "SPDXID": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-e2bb3e9519f0f73e", "versionInfo": "v1.4.15", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gabriel-vasile:mimetype:v1.4.15:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gabriel_vasile:mimetype:v1.4.15:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gabriel:mimetype:v1.4.15:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.15"}]}, {"name": "github.com/github/go-spdx/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-71a1ce25e5c98922", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github:go-spdx\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github:go_spdx\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/github/go-spdx@v2.7.0#v2"}]}, {"name": "github.com/go-git/gcfg", "SPDXID": "SPDXRef-Package-go-module-github.com-go-git-gcfg-e40b617f499a5a0a", "versionInfo": "v1.5.1-0.20230307220236-3a3c6141e376", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376"}]}, {"name": "github.com/go-git/go-billy/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-910c8e82974a5215", "versionInfo": "v5.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-git/go-billy@v5.9.1#v5"}]}, {"name": "github.com/go-git/go-git/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-71d4e54a6ec90e70", "versionInfo": "v5.19.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-git/go-git@v5.19.2#v5"}]}, {"name": "github.com/go-jose/go-jose/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-a4e7d5858b22b9d6", "versionInfo": "v4.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v4.1.5#v4"}]}, {"name": "github.com/go-logr/logr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-df454b006fecf55b", "versionInfo": "v1.4.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.4"}]}, {"name": "github.com/go-logr/stdr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-a79fe934af186486", "versionInfo": "v1.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2"}]}, {"name": "github.com/go-restruct/restruct", "SPDXID": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-8195b14163a7f5ac", "versionInfo": "v1.2.0-alpha", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-restruct/restruct@v1.2.0-alpha"}]}, {"name": "github.com/go-viper/mapstructure/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-b62139e20622b880", "versionInfo": "v2.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure@v2.5.0#v2"}]}, {"name": "github.com/goccy/go-yaml", "SPDXID": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-889fa9d42b26391f", "versionInfo": "v1.19.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goccy:go-yaml:v1.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goccy:go_yaml:v1.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/goccy/go-yaml@v1.19.2"}]}, {"name": "github.com/gohugoio/hashstructure", "SPDXID": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-12af8404e4dd8bcc", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gohugoio:hashstructure:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gohugoio/hashstructure@v0.6.0"}]}, {"name": "github.com/golang/groupcache", "SPDXID": "SPDXRef-Package-go-module-github.com-golang-groupcache-eb157f6f6ee2c229", "versionInfo": "v0.0.0-20241129210726-2c02b8208cf8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:groupcache:v0.0.0-20241129210726-2c02b8208cf8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8"}]}, {"name": "github.com/google/go-cmp", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-cmp-ff3de2e08b498951", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-cmp@v0.7.0"}]}, {"name": "github.com/google/go-containerregistry", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-c8bc6c981cadc45c", "versionInfo": "v0.22.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-containerregistry:v0.22.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_containerregistry:v0.22.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-containerregistry@v0.22.1"}]}, {"name": "github.com/google/licensecheck", "SPDXID": "SPDXRef-Package-go-module-github.com-google-licensecheck-293346918b594f14", "versionInfo": "v0.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:licensecheck:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/licensecheck@v0.3.1"}]}, {"name": "github.com/google/pprof", "SPDXID": "SPDXRef-Package-go-module-github.com-google-pprof-33a409154a7d5fba", "versionInfo": "v0.0.0-20260802141513-ef3492d7dac3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:pprof:v0.0.0-20260802141513-ef3492d7dac3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/pprof@v0.0.0-20260802141513-ef3492d7dac3"}]}, {"name": "github.com/google/s2a-go", "SPDXID": "SPDXRef-Package-go-module-github.com-google-s2a-go-7922ad182fdf0651", "versionInfo": "v0.1.9", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a-go:v0.1.9:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a_go:v0.1.9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/s2a-go@v0.1.9"}]}, {"name": "github.com/google/uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-b1c2ed56642f8c64", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0"}]}, {"name": "github.com/googleapis/enterprise-certificate-proxy", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-cdf33ccaabac67fa", "versionInfo": "v0.3.20", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.20:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.20:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.20"}]}, {"name": "github.com/googleapis/gax-go/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-03a5e0e109116338", "versionInfo": "v2.24.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.24.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax_go\\/v2:v2.24.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/gax-go@v2.24.0#v2"}]}, {"name": "github.com/gookit/color", "SPDXID": "SPDXRef-Package-go-module-github.com-gookit-color-97f8c3c1065b724f", "versionInfo": "v1.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gookit:color:v1.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gookit/color@v1.6.1"}]}, {"name": "github.com/gpustack/gguf-parser-go", "SPDXID": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-206d7c1f65a01760", "versionInfo": "v0.26.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gpustack:gguf-parser-go:v0.26.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gpustack:gguf_parser_go:v0.26.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gpustack/gguf-parser-go@v0.26.3"}]}, {"name": "github.com/hashicorp/aws-sdk-go-base/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-e43f84ec1b095da6", "versionInfo": "v2.0.0-beta.74", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:aws-sdk-go-base\\/v2:v2.0.0-beta.74:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:aws_sdk_go_base\\/v2:v2.0.0-beta.74:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/aws-sdk-go-base@v2.0.0-beta.74#v2"}]}, {"name": "github.com/hashicorp/errwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-ebf43ffea19ac19e", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0"}]}, {"name": "github.com/hashicorp/go-cleanhttp", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-7213c96638626afd", "versionInfo": "v0.5.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2"}]}, {"name": "github.com/hashicorp/go-getter", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-370e8e8c2e4cb4d6", "versionInfo": "v1.8.9", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-getter:v1.8.9:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_getter:v1.8.9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-getter@v1.8.9"}]}, {"name": "github.com/hashicorp/go-multierror", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-e8596b2b5a5786e2", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1"}]}, {"name": "github.com/hashicorp/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-492841238227a550", "versionInfo": "v1.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-version:v1.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_version:v1.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-version@v1.9.0"}]}, {"name": "github.com/hashicorp/golang-lru/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-40e3f02aa9617b4d", "versionInfo": "v2.0.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:golang-lru\\/v2:v2.0.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:golang_lru\\/v2:v2.0.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/golang-lru@v2.0.7#v2"}]}, {"name": "github.com/hashicorp/hcl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-e06ae34f74a85ab1", "versionInfo": "v2.25.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:hcl\\/v2:v2.25.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/hcl@v2.25.0#v2"}]}, {"name": "github.com/henvic/httpretty", "SPDXID": "SPDXRef-Package-go-module-github.com-henvic-httpretty-0fe1ffcb6734ef5f", "versionInfo": "v0.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:henvic:httpretty:v0.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/henvic/httpretty@v0.1.4"}]}, {"name": "github.com/huandu/xstrings", "SPDXID": "SPDXRef-Package-go-module-github.com-huandu-xstrings-897928f5ebc4ab0b", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:huandu:xstrings:v1.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/huandu/xstrings@v1.5.0"}]}, {"name": "github.com/iancoleman/strcase", "SPDXID": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-e1bf91bbb3753b61", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:iancoleman:strcase:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/iancoleman/strcase@v0.3.0"}]}, {"name": "github.com/jbenet/go-context", "SPDXID": "SPDXRef-Package-go-module-github.com-jbenet-go-context-82a60d7d8fc76532", "versionInfo": "v0.0.0-20150711004518-d14ea06fba99", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jbenet:go-context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jbenet:go_context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99"}]}, {"name": "github.com/jedib0t/go-pretty/v6", "SPDXID": "SPDXRef-Package-go-module-github.com-jedib0t-go-pretty-v6-bca63f77bb905e12", "versionInfo": "v6.8.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jedib0t:go-pretty\\/v6:v6.8.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jedib0t:go_pretty\\/v6:v6.8.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jedib0t/go-pretty@v6.8.3#v6"}]}, {"name": "github.com/jinzhu/copier", "SPDXID": "SPDXRef-Package-go-module-github.com-jinzhu-copier-6506bcbd1d90199b", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jinzhu:copier:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jinzhu/copier@v0.4.0"}]}, {"name": "github.com/json-iterator/go", "SPDXID": "SPDXRef-Package-go-module-github.com-json-iterator-go-4a3cddc35adf83bb", "versionInfo": "v1.1.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json_iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/json-iterator/go@v1.1.12"}]}, {"name": "github.com/kastenhq/goversion", "SPDXID": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-c1bc2fa66dce3a67", "versionInfo": "v0.0.0-20230811215019-93b2f8823953", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kastenhq:goversion:v0.0.0-20230811215019-93b2f8823953:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kastenhq/goversion@v0.0.0-20230811215019-93b2f8823953"}]}, {"name": "github.com/kevinburke/ssh_config", "SPDXID": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-7d5099b74f2d22bf", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kevinburke:ssh-config:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kevinburke:ssh_config:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kevinburke/ssh_config@v1.2.0"}]}, {"name": "github.com/klauspost/compress", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-compress-a77599fa8feceaf4", "versionInfo": "v1.20.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:compress:v1.20.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/compress@v1.20.1"}]}, {"name": "github.com/klauspost/cpuid/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-cpuid-v2-361201935203269e", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:cpuid\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/cpuid@v2.3.0#v2"}]}, {"name": "github.com/klauspost/pgzip", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-e505500a22b08c74", "versionInfo": "v1.2.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:pgzip:v1.2.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/pgzip@v1.2.6"}]}, {"name": "github.com/lucasb-eyer/go-colorful", "SPDXID": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-ff82b60dcdcb041a", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb-eyer:go-colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb-eyer:go_colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb_eyer:go-colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb_eyer:go_colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb:go-colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb:go_colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/lucasb-eyer/go-colorful@v1.3.0"}]}, {"name": "github.com/mattn/go-colorable", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-f1d23dc004013363", "versionInfo": "v0.1.14", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-colorable:v0.1.14:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_colorable:v0.1.14:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-colorable@v0.1.14"}]}, {"name": "github.com/mattn/go-isatty", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-2a35d73045f292eb", "versionInfo": "v0.0.24", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-isatty:v0.0.24:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_isatty:v0.0.24:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-isatty@v0.0.24"}]}, {"name": "github.com/mattn/go-runewidth", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-a8e04310fdd673e9", "versionInfo": "v0.0.27", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-runewidth:v0.0.27:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_runewidth:v0.0.27:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-runewidth@v0.0.27"}]}, {"name": "github.com/mgutz/ansi", "SPDXID": "SPDXRef-Package-go-module-github.com-mgutz-ansi-bf44f11a27092d29", "versionInfo": "v0.0.0-20200706080929-d51e80ef957d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mgutz:ansi:v0.0.0-20200706080929-d51e80ef957d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20200706080929-d51e80ef957d"}]}, {"name": "github.com/mholt/archives", "SPDXID": "SPDXRef-Package-go-module-github.com-mholt-archives-72f287d1b4e05798", "versionInfo": "v0.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mholt:archives:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mholt/archives@v0.1.5"}]}, {"name": "github.com/mikelolasagasti/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-597c4f8427895637", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mikelolasagasti:xz:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mikelolasagasti/xz@v1.0.1"}]}, {"name": "github.com/minio/minlz", "SPDXID": "SPDXRef-Package-go-module-github.com-minio-minlz-582eb4fbcfad0fcc", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:minio:minlz:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/minio/minlz@v1.0.1"}]}, {"name": "github.com/mitchellh/copystructure", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-c09e0a2899d822a0", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:copystructure:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/copystructure@v1.2.0"}]}, {"name": "github.com/mitchellh/go-homedir", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-4356e139501afc6c", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go-homedir:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go_homedir:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0"}]}, {"name": "github.com/mitchellh/go-wordwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-d5fb37f66f14834c", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go-wordwrap:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go_wordwrap:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1"}]}, {"name": "github.com/mitchellh/reflectwalk", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-b2b8c899369d0688", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:reflectwalk:v1.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2"}]}, {"name": "github.com/moby/docker-image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-78fcbd758bddbe2b", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker-image-spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker_image_spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1"}]}, {"name": "github.com/moby/locker", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-locker-9eb5c8fac452b5c5", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:locker:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/locker@v1.0.1"}]}, {"name": "github.com/moby/moby/api", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-api-b47702ccbb64f4ef", "versionInfo": "v1.56.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/api:v1.56.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v1.56.0#api"}]}, {"name": "github.com/moby/moby/client", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-client-b968eb01ff698237", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/client:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v0.6.0#client"}]}, {"name": "github.com/moby/sys/mountinfo", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-22afceefc4fadf9a", "versionInfo": "v0.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/mountinfo:v0.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.2#mountinfo"}]}, {"name": "github.com/moby/sys/signal", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-signal-652b3ee5e0a4f208", "versionInfo": "v0.7.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/signal:v0.7.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.1#signal"}]}, {"name": "github.com/moby/sys/user", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-user-74a26db5ebbbbf6c", "versionInfo": "v0.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/user:v0.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.4.1#user"}]}, {"name": "github.com/moby/sys/userns", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-userns-ad37a208c10c3026", "versionInfo": "v0.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/userns:v0.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.2.1#userns"}]}, {"name": "github.com/modern-go/concurrent", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-778b1ea1d69c0846", "versionInfo": "v0.0.0-20180306012644-bacd9c7ef1dd", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd"}]}, {"name": "github.com/modern-go/reflect2", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-cffa006b66cdd7fb", "versionInfo": "v1.0.3-0.20250322232337-35a7c28c31ee", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee"}]}, {"name": "github.com/muesli/ansi", "SPDXID": "SPDXRef-Package-go-module-github.com-muesli-ansi-a6f294ab58c45434", "versionInfo": "v0.0.0-20230316100256-276c6243b2f6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:muesli:ansi:v0.0.0-20230316100256-276c6243b2f6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/muesli/ansi@v0.0.0-20230316100256-276c6243b2f6"}]}, {"name": "github.com/muesli/cancelreader", "SPDXID": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-ea38c51c2b46d27e", "versionInfo": "v0.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:muesli:cancelreader:v0.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/muesli/cancelreader@v0.2.2"}]}, {"name": "github.com/muesli/termenv", "SPDXID": "SPDXRef-Package-go-module-github.com-muesli-termenv-cae7069cfa9b1d52", "versionInfo": "v0.16.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:muesli:termenv:v0.16.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/muesli/termenv@v0.16.0"}]}, {"name": "github.com/nix-community/go-nix", "SPDXID": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-7fe2b9bb4cf4a830", "versionInfo": "v0.0.0-20250101154619-4bdde671e0a1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix-community:go-nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix-community:go_nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix_community:go-nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix_community:go_nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix:go-nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix:go_nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/nix-community/go-nix@v0.0.0-20250101154619-4bdde671e0a1"}]}, {"name": "github.com/nwaples/rardecode/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-76baafffedf51903", "versionInfo": "v2.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nwaples:rardecode\\/v2:v2.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/nwaples/rardecode@v2.4.1#v2"}]}, {"name": "github.com/olekukonko/cat", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-cat-f72ce2effaabb165", "versionInfo": "v0.0.0-20250911104152-50322a0618f6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:cat:v0.0.0-20250911104152-50322a0618f6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/cat@v0.0.0-20250911104152-50322a0618f6"}]}, {"name": "github.com/olekukonko/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-errors-358a89bfb5ce7813", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:errors:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/errors@v1.2.0"}]}, {"name": "github.com/olekukonko/ll", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-ll-d6bf01caba1b5946", "versionInfo": "v0.1.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:ll:v0.1.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/ll@v0.1.6"}]}, {"name": "github.com/olekukonko/tablewriter", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-3ca861759d2e6a68", "versionInfo": "v1.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:tablewriter:v1.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/tablewriter@v1.1.5"}]}, {"name": "github.com/opencontainers/go-digest", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-45b75e571600d401", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0"}]}, {"name": "github.com/opencontainers/image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-3117c45942f0408e", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1"}]}, {"name": "github.com/opencontainers/runtime-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-c3fbeaf64eba0df6", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime-spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime_spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runtime-spec@v1.3.0"}]}, {"name": "github.com/pborman/indent", "SPDXID": "SPDXRef-Package-go-module-github.com-pborman-indent-b98109e969d6aaa0", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pborman:indent:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pborman/indent@v1.2.1"}]}, {"name": "github.com/pelletier/go-toml", "SPDXID": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-60e89bef97e7dade", "versionInfo": "v1.9.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go-toml:v1.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go_toml:v1.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pelletier/go-toml@v1.9.5"}]}, {"name": "github.com/pelletier/go-toml/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-a483154429893394", "versionInfo": "v2.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go-toml\\/v2:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go_toml\\/v2:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pelletier/go-toml@v2.4.3#v2"}]}, {"name": "github.com/pierrec/lz4/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-271735b2c09c1622", "versionInfo": "v4.1.26", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pierrec:lz4\\/v4:v4.1.26:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pierrec/lz4@v4.1.26#v4"}]}, {"name": "github.com/piprate/json-gold", "SPDXID": "SPDXRef-Package-go-module-github.com-piprate-json-gold-c23c3d63667a6df7", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:piprate:json-gold:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:piprate:json_gold:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/piprate/json-gold@v0.7.0"}]}, {"name": "github.com/pjbgf/sha1cd", "SPDXID": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-fde8479550dbd7e0", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pjbgf:sha1cd:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pjbgf/sha1cd@v0.6.0"}]}, {"name": "github.com/pkg/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-errors-b0e7cb1502358121", "versionInfo": "v0.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1"}]}, {"name": "github.com/pkg/profile", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-profile-7c3551b89851a805", "versionInfo": "v1.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:profile:v1.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/profile@v1.7.0"}]}, {"name": "github.com/pkg/xattr", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-xattr-c80070c35ab119e3", "versionInfo": "v0.4.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:xattr:v0.4.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/xattr@v0.4.12"}]}, {"name": "github.com/pquerna/cachecontrol", "SPDXID": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-19fa33549e468fb3", "versionInfo": "v0.0.0-20180517163645-1555304b9b35", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pquerna:cachecontrol:v0.0.0-20180517163645-1555304b9b35:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pquerna/cachecontrol@v0.0.0-20180517163645-1555304b9b35"}]}, {"name": "github.com/remyoudompheng/bigfft", "SPDXID": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-dc6d2f5d88dee29b", "versionInfo": "v0.0.0-20230129092748-24d4a6f8daec", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:remyoudompheng:bigfft:v0.0.0-20230129092748-24d4a6f8daec:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec"}]}, {"name": "github.com/rivo/uniseg", "SPDXID": "SPDXRef-Package-go-module-github.com-rivo-uniseg-42bef535db55fb1b", "versionInfo": "v0.4.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rivo:uniseg:v0.4.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/rivo/uniseg@v0.4.7"}]}, {"name": "github.com/rust-secure-code/go-rustaudit", "SPDXID": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-8c8a25d03726205a", "versionInfo": "v0.0.0-20250226111315-e20ec32e963c", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure-code:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure-code:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure_code:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure_code:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/rust-secure-code/go-rustaudit@v0.0.0-20250226111315-e20ec32e963c"}]}, {"name": "github.com/sagikazarmark/locafero", "SPDXID": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-87b833a174c648b2", "versionInfo": "v0.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sagikazarmark:locafero:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0"}]}, {"name": "github.com/saintfish/chardet", "SPDXID": "SPDXRef-Package-go-module-github.com-saintfish-chardet-b08bb8ded5db8007", "versionInfo": "v0.0.0-20230101081208-5e3ef4b5456d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:saintfish:chardet:v0.0.0-20230101081208-5e3ef4b5456d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/saintfish/chardet@v0.0.0-20230101081208-5e3ef4b5456d"}]}, {"name": "github.com/sassoftware/go-rpmutils", "SPDXID": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-a3422c09231cfc8b", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sassoftware:go-rpmutils:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sassoftware:go_rpmutils:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sassoftware/go-rpmutils@v0.4.0"}]}, {"name": "github.com/scylladb/go-set", "SPDXID": "SPDXRef-Package-go-module-github.com-scylladb-go-set-e4bc96a8e42e6fd8", "versionInfo": "v1.0.3-0.20200225121959-cc7b2070d91e", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:scylladb:go-set:v1.0.3-0.20200225121959-cc7b2070d91e:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:scylladb:go_set:v1.0.3-0.20200225121959-cc7b2070d91e:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/scylladb/go-set@v1.0.3-0.20200225121959-cc7b2070d91e"}]}, {"name": "github.com/sergi/go-diff", "SPDXID": "SPDXRef-Package-go-module-github.com-sergi-go-diff-d1cfec4ab3fb921a", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sergi:go-diff:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sergi:go_diff:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sergi/go-diff@v1.4.0"}]}, {"name": "github.com/shopspring/decimal", "SPDXID": "SPDXRef-Package-go-module-github.com-shopspring-decimal-11b96ebb9461110e", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:shopspring:decimal:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/shopspring/decimal@v1.4.0"}]}, {"name": "github.com/sirupsen/logrus", "SPDXID": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-f4ba379c23c93530", "versionInfo": "v1.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sirupsen:logrus:v1.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sirupsen/logrus@v1.10.2"}]}, {"name": "github.com/skeema/knownhosts", "SPDXID": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-58ee2c391bc17f4e", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:skeema:knownhosts:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/skeema/knownhosts@v1.3.1"}]}, {"name": "github.com/smallnest/ringbuffer", "SPDXID": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-21b0a9278220bb37", "versionInfo": "v0.0.0-20241116012123-461381446e3d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:smallnest:ringbuffer:v0.0.0-20241116012123-461381446e3d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/smallnest/ringbuffer@v0.0.0-20241116012123-461381446e3d"}]}, {"name": "github.com/sorairolake/lzip-go", "SPDXID": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-bdba703399ae0c44", "versionInfo": "v0.3.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sorairolake:lzip-go:v0.3.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sorairolake:lzip_go:v0.3.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sorairolake/lzip-go@v0.3.8"}]}, {"name": "github.com/sourcegraph/conc", "SPDXID": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-7a5dbed10afaf5d8", "versionInfo": "v0.3.1-0.20240121214520-5f936abd7ae8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sourcegraph:conc:v0.3.1-0.20240121214520-5f936abd7ae8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8"}]}, {"name": "github.com/spdx/gordf", "SPDXID": "SPDXRef-Package-go-module-github.com-spdx-gordf-c663d08f5e8e7013", "versionInfo": "v0.0.0-20201111095634-7098f93598fb", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spdx:gordf:v0.0.0-20201111095634-7098f93598fb:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spdx/gordf@v0.0.0-20201111095634-7098f93598fb"}]}, {"name": "github.com/spdx/tools-golang", "SPDXID": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-5cc1ebaf38b7a4a3", "versionInfo": "v0.6.0-rc4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spdx:tools-golang:v0.6.0-rc4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spdx:tools_golang:v0.6.0-rc4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spdx/tools-golang@v0.6.0-rc4"}]}, {"name": "github.com/spf13/afero", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-afero-99add1478204b375", "versionInfo": "v1.15.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:afero:v1.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/afero@v1.15.0"}]}, {"name": "github.com/spf13/cast", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cast-cc2980b5acdc6901", "versionInfo": "v1.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cast:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cast@v1.10.0"}]}, {"name": "github.com/spf13/cobra", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cobra-e0c690f0159793c5", "versionInfo": "v1.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2"}]}, {"name": "github.com/spf13/pflag", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-d316708e1e2b9d30", "versionInfo": "v1.0.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10"}]}, {"name": "github.com/spf13/viper", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-viper-cef22228a4bc4536", "versionInfo": "v1.21.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:viper:v1.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/viper@v1.21.0"}]}, {"name": "github.com/spiffe/go-spiffe/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-241ea1749f9d70f7", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spiffe:go-spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spiffe:go_spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spiffe/go-spiffe@v2.7.0#v2"}]}, {"name": "github.com/subosito/gotenv", "SPDXID": "SPDXRef-Package-go-module-github.com-subosito-gotenv-0f0e124c968d9751", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:subosito:gotenv:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/subosito/gotenv@v1.6.0"}]}, {"name": "github.com/sylabs/sif/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-1d90063baf48202c", "versionInfo": "v2.24.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sylabs:sif\\/v2:v2.24.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sylabs/sif@v2.24.2#v2"}]}, {"name": "github.com/sylabs/squashfs", "SPDXID": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-b29f82f51e1dffbf", "versionInfo": "v1.0.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sylabs:squashfs:v1.0.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sylabs/squashfs@v1.0.6"}]}, {"name": "github.com/tailscale/hujson", "SPDXID": "SPDXRef-Package-go-module-github.com-tailscale-hujson-e878fc00de5325e8", "versionInfo": "v0.0.0-20260302212456-ecc657c15afd", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tailscale:hujson:v0.0.0-20260302212456-ecc657c15afd:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tailscale/hujson@v0.0.0-20260302212456-ecc657c15afd"}]}, {"name": "github.com/therootcompany/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-therootcompany-xz-d85b120bb1810dae", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:therootcompany:xz:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/therootcompany/xz@v1.0.1"}]}, {"name": "github.com/ulikunitz/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-9ee04691d0f29078", "versionInfo": "v0.5.17", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ulikunitz:xz:v0.5.17:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ulikunitz/xz@v0.5.17"}]}, {"name": "github.com/vbatts/go-mtree", "SPDXID": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-bf1e27193e9b3e7f", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:go-mtree:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:go_mtree:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbatts/go-mtree@v0.7.0"}]}, {"name": "github.com/vifraa/gopom", "SPDXID": "SPDXRef-Package-go-module-github.com-vifraa-gopom-da94213662c9de9b", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vifraa:gopom:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vifraa/gopom@v1.0.0"}]}, {"name": "github.com/wagoodman/go-partybus", "SPDXID": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-aab8073ba58c8a0d", "versionInfo": "v0.0.0-20230516145632-8ccac152c651", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go-partybus:v0.0.0-20230516145632-8ccac152c651:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go_partybus:v0.0.0-20230516145632-8ccac152c651:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/wagoodman/go-partybus@v0.0.0-20230516145632-8ccac152c651"}]}, {"name": "github.com/wagoodman/go-progress", "SPDXID": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-adafb4d87f39b301", "versionInfo": "v0.0.0-20260303201901-10176f79b2c0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go-progress:v0.0.0-20260303201901-10176f79b2c0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go_progress:v0.0.0-20260303201901-10176f79b2c0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/wagoodman/go-progress@v0.0.0-20260303201901-10176f79b2c0"}]}, {"name": "github.com/xanzy/ssh-agent", "SPDXID": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-66151335077c15e0", "versionInfo": "v0.3.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xanzy:ssh-agent:v0.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xanzy:ssh_agent:v0.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3"}]}, {"name": "github.com/xi2/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-xi2-xz-b282e1ac6985dd7a", "versionInfo": "v0.0.0-20171230120015-48954b6210f8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xi2:xz:v0.0.0-20171230120015-48954b6210f8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/xi2/xz@v0.0.0-20171230120015-48954b6210f8"}]}, {"name": "github.com/xo/terminfo", "SPDXID": "SPDXRef-Package-go-module-github.com-xo-terminfo-fcc5be61f020a9c0", "versionInfo": "v0.0.0-20220910002029-abceb7e1c41e", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xo:terminfo:v0.0.0-20220910002029-abceb7e1c41e:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/xo/terminfo@v0.0.0-20220910002029-abceb7e1c41e"}]}, {"name": "github.com/zclconf/go-cty", "SPDXID": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-71b64d1b5e5f5217", "versionInfo": "v1.19.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go-cty:v1.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go_cty:v1.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/zclconf/go-cty@v1.19.0"}]}, {"name": "github.com/zyedidia/generic", "SPDXID": "SPDXRef-Package-go-module-github.com-zyedidia-generic-d2161209288501ac", "versionInfo": "v1.2.2-0.20230320175451-4410d2372cb1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zyedidia:generic:v1.2.2-0.20230320175451-4410d2372cb1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/zyedidia/generic@v1.2.2-0.20230320175451-4410d2372cb1"}]}, {"name": "go.opentelemetry.io/auto/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-093c53a915e16000", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1"}]}, {"name": "go.opentelemetry.io/contrib/detectors/gcp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-251417f55a49f754", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:detectors\\/gcp:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/detectors@v1.44.0#gcp"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-dbe86b34eed7194d", "versionInfo": "v0.71.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/google.golang.org\\/grpc\\/otelgrpc:v0.71.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.71.0#google.golang.org/grpc/otelgrpc"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-e2c3c5f87532b417", "versionInfo": "v0.71.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.71.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.71.0#net/http/otelhttp"}]}, {"name": "go.opentelemetry.io/otel", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-270603bf95afd322", "versionInfo": "v1.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.46.0"}]}, {"name": "go.opentelemetry.io/otel/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-1b587c90586fbfed", "versionInfo": "v1.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:metric:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.46.0"}]}, {"name": "go.opentelemetry.io/otel/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-1f44e64c63a9b8ba", "versionInfo": "v1.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:sdk:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.46.0"}]}, {"name": "go.opentelemetry.io/otel/sdk/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-bf628c25da688b9c", "versionInfo": "v1.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:sdk\\/metric:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.46.0#metric"}]}, {"name": "go.opentelemetry.io/otel/trace", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-a74992ca746ea728", "versionInfo": "v1.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:trace:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.46.0"}]}, {"name": "go.yaml.in/yaml/v3", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-c817c4616874dc26", "versionInfo": "v3.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5"}]}, {"name": "go4.org", "SPDXID": "SPDXRef-Package-go-module-go4.org-e51fd80848f5f8cb", "versionInfo": "v0.0.0-20230225012048-214862532bf5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go4.org@v0.0.0-20230225012048-214862532bf5"}]}, {"name": "golang.org/x/crypto", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-cbc8baf3b61e29e7", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ssh:v0.57.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.57.0"}]}, {"name": "golang.org/x/exp", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-exp-2a670a2280191360", "versionInfo": "v0.0.0-20260410095643-746e56fc9e2f", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/exp:v0.0.0-20260410095643-746e56fc9e2f:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/exp@v0.0.0-20260410095643-746e56fc9e2f"}]}, {"name": "golang.org/x/mod", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-mod-6b9cb3fe260c899c", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/mod:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/mod@v0.41.0"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-d9d4c19de4794dff", "versionInfo": "v0.59.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.59.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.59.0"}]}, {"name": "golang.org/x/oauth2", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-oauth2-f596e9cf3b8c199a", "versionInfo": "v0.36.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/oauth2:v0.36.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/oauth2@v0.36.0"}]}, {"name": "golang.org/x/sync", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-2f00e5d4caf125d8", "versionInfo": "v0.23.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.23.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sync@v0.23.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-b509816a3c820e75", "versionInfo": "v0.48.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.48.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.48.0"}]}, {"name": "golang.org/x/term", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-term-c02a771ee8911f1b", "versionInfo": "v0.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/term:v0.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/term@v0.46.0"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-2e9c3e87664566fa", "versionInfo": "v0.42.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.42.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.42.0"}]}, {"name": "golang.org/x/time", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-time-c68af344b19f9ff4", "versionInfo": "v0.16.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/time:v0.16.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/time@v0.16.0"}]}, {"name": "golang.org/x/tools", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-tools-c30343a0924a5201", "versionInfo": "v0.50.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/tools:v0.50.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/tools@v0.50.0"}]}, {"name": "golang.org/x/xerrors", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-xerrors-bf48a97bc6e6c213", "versionInfo": "v0.0.0-20231012003039-104605ab7028", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/xerrors:v0.0.0-20231012003039-104605ab7028:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/xerrors@v0.0.0-20231012003039-104605ab7028"}]}, {"name": "google.golang.org/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-api-254b90c84d794f0e", "versionInfo": "v0.294.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:api:v0.294.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/api@v0.294.0"}]}, {"name": "google.golang.org/genproto", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-edb07b5dfc98ea0d", "versionInfo": "v0.0.0-20260715232425-e75dac1f907d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260715232425-e75dac1f907d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto@v0.0.0-20260715232425-e75dac1f907d"}]}, {"name": "google.golang.org/genproto/googleapis/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-6f60ecd3b8d3a07f", "versionInfo": "v0.0.0-20260825221802-da73d73af1c5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260825221802-da73d73af1c5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260825221802-da73d73af1c5#api"}]}, {"name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-f6994cc1ab16b9f4", "versionInfo": "v0.0.0-20260825221802-da73d73af1c5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260825221802-da73d73af1c5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260825221802-da73d73af1c5#rpc"}]}, {"name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-27c32aca53188fd3", "versionInfo": "v1.83.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:grpc:v1.83.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.83.2"}]}, {"name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-884740f62801ba85", "versionInfo": "v1.36.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.12"}]}, {"name": "gopkg.in/warnings.v0", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-eb23cf040a1c3e89", "versionInfo": "v0.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/warnings.v0@v0.1.2"}]}, {"name": "howett.net/plist", "SPDXID": "SPDXRef-Package-go-module-howett.net-plist-9034873c0e00c75f", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/howett.net/plist@v1.0.1"}]}, {"name": "modernc.org/libc", "SPDXID": "SPDXRef-Package-go-module-modernc.org-libc-db6629e3acc874ba", "versionInfo": "v1.75.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/libc@v1.75.7"}]}, {"name": "modernc.org/mathutil", "SPDXID": "SPDXRef-Package-go-module-modernc.org-mathutil-79cdae1a3ff1134b", "versionInfo": "v1.7.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/mathutil@v1.7.1"}]}, {"name": "modernc.org/memory", "SPDXID": "SPDXRef-Package-go-module-modernc.org-memory-e8d78e2d0f707465", "versionInfo": "v1.12.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/memory@v1.12.1"}]}, {"name": "modernc.org/sqlite", "SPDXID": "SPDXRef-Package-go-module-modernc.org-sqlite-e83e5655782d5652", "versionInfo": "v1.59.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/sqlite@v1.59.0"}]}, {"name": "stdlib", "SPDXID": "SPDXRef-Package-go-module-stdlib-fc90a38b069ba9d9", "versionInfo": "go1.27.2-X:nodwarf5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:go:1.27.2:-:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/stdlib@1.27.2-X%3Anodwarf5"}]}, {"name": "syft", "SPDXID": "SPDXRef-Package-rpm-syft-2bf815fa5dd37922", "versionInfo": "1.54.1-0.2.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:syft:syft:1.54.1-0.2.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/syft@1.54.1-0.2.hum1?distro=hummingbird-1"}]}, {"name": "rpm-extracted/syft-1.54.1-0.2.hum1.aarch64", "SPDXID": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "syft", "SPDXID": "SPDXRef-Package-rpm-syft-a76c56f2f615c9b5", "versionInfo": "1.54.1-0.2.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/lib/debug/usr/bin/syft-1.54.1-0.2.hum1.aarch64.debug", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:syft:syft:1.54.1-0.2.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/syft@1.54.1-0.2.hum1?distro=hummingbird-1"}]}, {"name": "rpm-extracted/syft-debuginfo-1.54.1-0.2.hum1.aarch64", "SPDXID": "SPDXRef-Directory-Root-syft-debuginfo-1.54.1-0.2.hum1.aarch64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/syft-debugsource-1.54.1-0.2.hum1.aarch64", "SPDXID": "SPDXRef-Directory-Root-syft-debugsource-1.54.1-0.2.hum1.aarch64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "cel.dev/expr", "SPDXID": "SPDXRef-Package-go-module-cel.dev-expr-a7df6a72bcffdad7", "versionInfo": "v0.25.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cel.dev/expr@v0.25.2"}]}, {"name": "cloud.google.com/go", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-0727ecff2c851a26", "versionInfo": "v0.123.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go@v0.123.0"}]}, {"name": "cloud.google.com/go/auth", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-f4d69f7cc2af0ce9", "versionInfo": "v0.23.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth:v0.23.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.23.2"}]}, {"name": "cloud.google.com/go/auth/oauth2adapt", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-93847d524504048c", "versionInfo": "v0.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth\\/oauth2adapt:v0.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.2.8#oauth2adapt"}]}, {"name": "cloud.google.com/go/compute/metadata", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-355d6bfd0cdce40f", "versionInfo": "v0.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:compute\\/metadata:v0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/compute@v0.9.0#metadata"}]}, {"name": "cloud.google.com/go/iam", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-iam-7bb6ec5683962a67", "versionInfo": "v1.12.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:iam:v1.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/iam@v1.12.0"}]}, {"name": "cloud.google.com/go/monitoring", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-45ebb7abb740ceda", "versionInfo": "v1.30.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:monitoring:v1.30.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/monitoring@v1.30.0"}]}, {"name": "cloud.google.com/go/storage", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-storage-6800a0a78611e519", "versionInfo": "v1.65.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:storage:v1.65.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/storage@v1.65.1"}]}, {"name": "dario.cat/mergo", "SPDXID": "SPDXRef-Package-go-module-dario.cat-mergo-acbe432e88ddfc5c", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/dario.cat/mergo@v1.0.2"}]}, {"name": "github.com/BurntSushi/toml", "SPDXID": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-66ba331675153dfb", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:BurntSushi:toml:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/BurntSushi/toml@v1.6.0"}]}, {"name": "github.com/CycloneDX/cyclonedx-go", "SPDXID": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-70ad11297dc12277", "versionInfo": "v0.12.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:CycloneDX:cyclonedx-go:v0.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:CycloneDX:cyclonedx_go:v0.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/CycloneDX/cyclonedx-go@v0.12.0"}]}, {"name": "github.com/DataDog/zstd", "SPDXID": "SPDXRef-Package-go-module-github.com-DataDog-zstd-4c32d5de56bc78d8", "versionInfo": "v1.5.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:DataDog:zstd:v1.5.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/DataDog/zstd@v1.5.5"}]}, {"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp", "SPDXID": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-659e31124494f0e5", "versionInfo": "v1.33.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/detectors\\/gcp:v1.33.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/detectors\\/gcp:v1.33.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go@v1.33.0#detectors/gcp"}]}, {"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric", "SPDXID": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-e0ce66e7d5880f46", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/exporter\\/metric:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/exporter\\/metric:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go@v0.57.0#exporter/metric"}]}, {"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping", "SPDXID": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-5accdc634261df6f", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/internal\\/resourcemapping:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/internal\\/resourcemapping:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go@v0.57.0#internal/resourcemapping"}]}, {"name": "github.com/Masterminds/goutils", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-578e9d996bf5d9b7", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goutils_project:goutils:v1.1.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/goutils@v1.1.1"}]}, {"name": "github.com/Masterminds/semver/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-c28b948cf11e819c", "versionInfo": "v3.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:semver\\/v3:v3.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/semver@v3.5.0#v3"}]}, {"name": "github.com/Masterminds/sprig/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-2a0bb83b8c00d9e5", "versionInfo": "v3.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:sprig\\/v3:v3.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/sprig@v3.3.0#v3"}]}, {"name": "github.com/OneOfOne/xxhash", "SPDXID": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-bda4c55dbbd66de7", "versionInfo": "v1.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:OneOfOne:xxhash:v1.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/OneOfOne/xxhash@v1.2.8"}]}, {"name": "github.com/ProtonMail/go-crypto", "SPDXID": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-090662b0e012028c", "versionInfo": "v1.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go-crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go_crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ProtonMail/go-crypto@v1.4.1"}]}, {"name": "github.com/STARRY-S/zip", "SPDXID": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-9c650a45f3d7108a", "versionInfo": "v0.2.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:STARRY-S:zip:v0.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:STARRY_S:zip:v0.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:STARRY:zip:v0.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/STARRY-S/zip@v0.2.3"}]}, {"name": "github.com/acarl005/stripansi", "SPDXID": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-a4d06e781ccf2d23", "versionInfo": "v0.0.0-20180116102854-5a71ef0e047d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:acarl005:stripansi:v0.0.0-20180116102854-5a71ef0e047d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/acarl005/stripansi@v0.0.0-20180116102854-5a71ef0e047d"}]}, {"name": "github.com/acobaugh/osrelease", "SPDXID": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-2ca729a64708cc53", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:acobaugh:osrelease:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/acobaugh/osrelease@v0.1.0"}]}, {"name": "github.com/adrg/xdg", "SPDXID": "SPDXRef-Package-go-module-github.com-adrg-xdg-b9498e9ef865c60f", "versionInfo": "v0.5.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:adrg:xdg:v0.5.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/adrg/xdg@v0.5.3"}]}, {"name": "github.com/agext/levenshtein", "SPDXID": "SPDXRef-Package-go-module-github.com-agext-levenshtein-7df026d990bcdf01", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:agext:levenshtein:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/agext/levenshtein@v1.2.1"}]}, {"name": "github.com/anchore/bubbly", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-bubbly-597e7d9f6a0329b9", "versionInfo": "v0.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:bubbly:v0.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/bubbly@v0.2.2"}]}, {"name": "github.com/anchore/clio", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-clio-fde9c4a8bcada52d", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:clio:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/clio@v0.1.1"}]}, {"name": "github.com/anchore/fangs", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-fangs-0e3e0500596486f2", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:fangs:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/fangs@v0.1.1"}]}, {"name": "github.com/anchore/go-collections", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-collections-3f00d0bcf1ac6844", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-collections:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_collections:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-collections@v0.1.1"}]}, {"name": "github.com/anchore/go-homedir", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-f4eb78fa919afae8", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-homedir:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_homedir:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-homedir@v0.1.1"}]}, {"name": "github.com/anchore/go-logger", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-logger-9c3895a50ba4985a", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-logger:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_logger:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-logger@v0.2.0"}]}, {"name": "github.com/anchore/go-lzo", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-08b82c3b61b10764", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-lzo:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_lzo:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-lzo@v0.1.1"}]}, {"name": "github.com/anchore/go-macholibre", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-a191a2a9c12fc345", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-macholibre:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_macholibre:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-macholibre@v0.1.1"}]}, {"name": "github.com/anchore/go-rpmdb", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-1d9880cf0dece79d", "versionInfo": "v0.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-rpmdb:v0.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_rpmdb:v0.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-rpmdb@v0.2.2"}]}, {"name": "github.com/anchore/go-struct-converter", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-d178047549b53835", "versionInfo": "v0.2.0-rc2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-struct-converter:v0.2.0-rc2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_struct_converter:v0.2.0-rc2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-struct-converter@v0.2.0-rc2"}]}, {"name": "github.com/anchore/go-sync", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-sync-58c62323d4870c5e", "versionInfo": "v0.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-sync:v0.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_sync:v0.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-sync@v0.1.2"}]}, {"name": "github.com/anchore/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-version-d9c3cf6e178c6af2", "versionInfo": "v1.2.2-0.20200701162849-18adb9c92b9b", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-version:v1.2.2-0.20200701162849-18adb9c92b9b:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_version:v1.2.2-0.20200701162849-18adb9c92b9b:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-version@v1.2.2-0.20200701162849-18adb9c92b9b"}]}, {"name": "github.com/anchore/packageurl-go", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-846d9a39297aa602", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:packageurl-go:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:packageurl_go:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/packageurl-go@v0.2.0"}]}, {"name": "github.com/anchore/stereoscope", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-1b7e34302281dc6f", "versionInfo": "v0.3.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:stereoscope:v0.3.4:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/stereoscope@v0.3.4"}]}, {"name": "github.com/anchore/syft", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "versionInfo": "v1.54.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:syft:v1.54.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/syft@v1.54.1"}]}, {"name": "github.com/andybalholm/brotli", "SPDXID": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-d3714791c451b517", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:andybalholm:brotli:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/andybalholm/brotli@v1.2.0"}]}, {"name": "github.com/apparentlymart/go-textseg/v15", "SPDXID": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-feac8b36bf25f68f", "versionInfo": "v15.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go-textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go_textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/apparentlymart/go-textseg@v15.0.0#v15"}]}, {"name": "github.com/apparentlymart/go-textseg/v17", "SPDXID": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v17-8bc5aedb13dca2d5", "versionInfo": "v17.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go-textseg\\/v17:v17.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go_textseg\\/v17:v17.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/apparentlymart/go-textseg@v17.0.1#v17"}]}, {"name": "github.com/aquasecurity/go-pep440-version", "SPDXID": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-5d1e6aff3bda7771", "versionInfo": "v0.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go-pep440-version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go_pep440_version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aquasecurity/go-pep440-version@v0.0.1"}]}, {"name": "github.com/aquasecurity/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-1d50914ff96faf14", "versionInfo": "v0.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go-version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go_version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aquasecurity/go-version@v0.0.1"}]}, {"name": "github.com/aws/aws-sdk-go-v2", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-fc77695bfda879ad", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.44.0"}]}, {"name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-01e0ca909b2fce23", "versionInfo": "v1.7.20", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/aws\\/protocol\\/eventstream:v1.7.20:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/aws\\/protocol\\/eventstream:v1.7.20:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.7.20#aws/protocol/eventstream"}]}, {"name": "github.com/aws/aws-sdk-go-v2/config", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-903587a948177714", "versionInfo": "v1.32.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/config:v1.32.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/config:v1.32.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.32.40#config"}]}, {"name": "github.com/aws/aws-sdk-go-v2/credentials", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-0c101f19e1cfa697", "versionInfo": "v1.19.39", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/credentials:v1.19.39:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/credentials:v1.19.39:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.19.39#credentials"}]}, {"name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-6ed35f21faba0716", "versionInfo": "v1.18.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/feature\\/ec2\\/imds:v1.18.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/feature\\/ec2\\/imds:v1.18.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.18.40#feature/ec2/imds"}]}, {"name": "github.com/aws/aws-sdk-go-v2/internal/configsources", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-43800e4fd0d969e7", "versionInfo": "v1.4.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/configsources:v1.4.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/configsources:v1.4.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.4.40#internal/configsources"}]}, {"name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-9453340a6b704c4c", "versionInfo": "v2.7.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/endpoints\\/v2:v2.7.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/endpoints\\/v2:v2.7.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v2.7.40#internal/endpoints/v2"}]}, {"name": "github.com/aws/aws-sdk-go-v2/internal/v4a", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-107318bb3567ab8d", "versionInfo": "v1.4.41", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/v4a:v1.4.41:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/v4a:v1.4.41:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.4.41#internal/v4a"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-a88149578be772f4", "versionInfo": "v1.13.19", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/accept-encoding:v1.13.19:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/accept_encoding:v1.13.19:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.13.19#service/internal/accept-encoding"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-e738f20d9fad0a4b", "versionInfo": "v1.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/checksum:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/checksum:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.10.0#service/internal/checksum"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-fb9c34898325e0d1", "versionInfo": "v1.13.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/presigned-url:v1.13.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/presigned_url:v1.13.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.13.40#service/internal/presigned-url"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-937d2cc58490ebe0", "versionInfo": "v1.19.41", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/s3shared:v1.19.41:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/s3shared:v1.19.41:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.19.41#service/internal/s3shared"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/s3", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-c8db2922ad128f6e", "versionInfo": "v1.108.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/s3:v1.108.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/s3:v1.108.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.108.0#service/s3"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/signin", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-8c7c5960dfd5ea9c", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/signin:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/signin:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.6.0#service/signin"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/sso", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-dfa9a326d7f9bcfe", "versionInfo": "v1.34.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sso:v1.34.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sso:v1.34.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.34.0#service/sso"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/ssooidc", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-65d07a903b44550b", "versionInfo": "v1.39.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ssooidc:v1.39.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ssooidc:v1.39.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.39.0#service/ssooidc"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/sts", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-a5c0950a359e00e4", "versionInfo": "v1.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sts:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sts:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.46.0#service/sts"}]}, {"name": "github.com/aws/smithy-go", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-smithy-go-bfc935e427903ffc", "versionInfo": "v1.28.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:smithy-go:v1.28.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:smithy_go:v1.28.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/smithy-go@v1.28.1"}]}, {"name": "github.com/aymanbagabas/go-osc52/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-b3747ed261fa297f", "versionInfo": "v2.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aymanbagabas:go-osc52\\/v2:v2.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aymanbagabas:go_osc52\\/v2:v2.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aymanbagabas/go-osc52@v2.0.1#v2"}]}, {"name": "github.com/becheran/wildmatch-go", "SPDXID": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-9d3e5a3286fcad55", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:becheran:wildmatch-go:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:becheran:wildmatch_go:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/becheran/wildmatch-go@v1.0.0"}]}, {"name": "github.com/bgentry/go-netrc", "SPDXID": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-27ae2ddf26491e0d", "versionInfo": "v0.0.0-20140422174119-9fd32a8b3d3d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bgentry:go-netrc:v0.0.0-20140422174119-9fd32a8b3d3d:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bgentry:go_netrc:v0.0.0-20140422174119-9fd32a8b3d3d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bgentry/go-netrc@v0.0.0-20140422174119-9fd32a8b3d3d"}]}, {"name": "github.com/bitnami/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-bitnami-go-version-1fe4673a8e2a782b", "versionInfo": "v0.0.0-20250131085805-b1f57a8634ef", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bitnami:go-version:v0.0.0-20250131085805-b1f57a8634ef:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bitnami:go_version:v0.0.0-20250131085805-b1f57a8634ef:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bitnami/go-version@v0.0.0-20250131085805-b1f57a8634ef"}]}, {"name": "github.com/blakesmith/ar", "SPDXID": "SPDXRef-Package-go-module-github.com-blakesmith-ar-21217de5f37b5515", "versionInfo": "v0.0.0-20190502131153-809d4375e1fb", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:blakesmith:ar:v0.0.0-20190502131153-809d4375e1fb:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/blakesmith/ar@v0.0.0-20190502131153-809d4375e1fb"}]}, {"name": "github.com/bmatcuk/doublestar/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-5e321fbf38d4cd6c", "versionInfo": "v4.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bmatcuk:doublestar\\/v4:v4.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bmatcuk/doublestar@v4.10.2#v4"}]}, {"name": "github.com/bodgit/plumbing", "SPDXID": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-bfbc61b0bb4ba998", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bodgit:plumbing:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bodgit/plumbing@v1.3.0"}]}, {"name": "github.com/bodgit/sevenzip", "SPDXID": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-e1e12a00b785ba88", "versionInfo": "v1.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bodgit:sevenzip:v1.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bodgit/sevenzip@v1.6.1"}]}, {"name": "github.com/bodgit/windows", "SPDXID": "SPDXRef-Package-go-module-github.com-bodgit-windows-16dd850e3671318b", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bodgit:windows:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bodgit/windows@v1.0.1"}]}, {"name": "github.com/cespare/xxhash/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-576798fb40e7b661", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cespare/xxhash@v2.3.0#v2"}]}, {"name": "github.com/charmbracelet/bubbles", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-75cef683cf293905", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:bubbles:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/bubbles@v1.0.0"}]}, {"name": "github.com/charmbracelet/bubbletea", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-64fb852e2a776700", "versionInfo": "v1.3.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:bubbletea:v1.3.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/bubbletea@v1.3.10"}]}, {"name": "github.com/charmbracelet/colorprofile", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-d480a66d24710fb0", "versionInfo": "v0.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:colorprofile:v0.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/colorprofile@v0.4.3"}]}, {"name": "github.com/charmbracelet/harmonica", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-2f4451408657c478", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:harmonica:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/harmonica@v0.2.0"}]}, {"name": "github.com/charmbracelet/lipgloss", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-ed3caa1a3839c859", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:lipgloss:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/lipgloss@v1.1.0"}]}, {"name": "github.com/charmbracelet/x/ansi", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-faf25355bb48670c", "versionInfo": "v0.11.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:x\\/ansi:v0.11.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/x@v0.11.6#ansi"}]}, {"name": "github.com/charmbracelet/x/cellbuf", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-bc88c25f250a186c", "versionInfo": "v0.0.15", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:x\\/cellbuf:v0.0.15:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/x@v0.0.15#cellbuf"}]}, {"name": "github.com/charmbracelet/x/term", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-8f1948d2f885406f", "versionInfo": "v0.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:x\\/term:v0.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/x@v0.2.2#term"}]}, {"name": "github.com/clipperhouse/displaywidth", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-44186e0ba7dae7bd", "versionInfo": "v0.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:displaywidth:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/displaywidth@v0.11.0"}]}, {"name": "github.com/clipperhouse/uax29/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-ee6a78a16d185fcb", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:uax29\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/uax29@v2.7.0#v2"}]}, {"name": "github.com/cloudflare/circl", "SPDXID": "SPDXRef-Package-go-module-github.com-cloudflare-circl-66d500492fae990a", "versionInfo": "v1.6.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cloudflare:circl:v1.6.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cloudflare/circl@v1.6.3"}]}, {"name": "github.com/cncf/xds/go", "SPDXID": "SPDXRef-Package-go-module-github.com-cncf-xds-go-8610713f81695b9a", "versionInfo": "v0.0.0-20260202195803-dba9d589def2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cncf:xds\\/go:v0.0.0-20260202195803-dba9d589def2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cncf/xds@v0.0.0-20260202195803-dba9d589def2#go"}]}, {"name": "github.com/containerd/containerd/api", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-d6fd8d45010e4846", "versionInfo": "v1.12.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:containerd\\/api:v1.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/containerd@v1.12.0#api"}]}, {"name": "github.com/containerd/containerd/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-e505a7135b25e9c0", "versionInfo": "v2.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:containerd\\/v2:v2.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/containerd@v2.4.1#v2"}]}, {"name": "github.com/containerd/continuity", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-continuity-097339753e8dc2f3", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:continuity:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/continuity@v0.5.0"}]}, {"name": "github.com/containerd/errdefs", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-a23101c329da5c9d", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v1.0.0"}]}, {"name": "github.com/containerd/errdefs/pkg", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-b0943a26d5e47322", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs\\/pkg:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v0.3.0#pkg"}]}, {"name": "github.com/containerd/fifo", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-fifo-354ac39ddda2028c", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:fifo:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/fifo@v1.1.0"}]}, {"name": "github.com/containerd/log", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-log-5668f2b74a2d24e9", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:log:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/log@v0.2.0"}]}, {"name": "github.com/containerd/log/otel", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-log-otel-691dec3dfe196e5d", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:log\\/otel:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/log@v0.1.0#otel"}]}, {"name": "github.com/containerd/platforms", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-platforms-b86e900620cd731d", "versionInfo": "v1.0.0-rc.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:platforms:v1.0.0-rc.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.5"}]}, {"name": "github.com/containerd/plugin", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-plugin-b3879231eb9b17ca", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:plugin:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/plugin@v1.1.0"}]}, {"name": "github.com/containerd/ttrpc", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-2a27344f1065c62c", "versionInfo": "v1.2.9", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:ttrpc:v1.2.9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/ttrpc@v1.2.9"}]}, {"name": "github.com/containerd/typeurl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-d703fa66061c4460", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:typeurl\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/typeurl@v2.3.0#v2"}]}, {"name": "github.com/cyphar/filepath-securejoin", "SPDXID": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-4a015440de5fc851", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath-securejoin:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath_securejoin:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.7.0"}]}, {"name": "github.com/deitch/magic", "SPDXID": "SPDXRef-Package-go-module-github.com-deitch-magic-470e2ef52538f585", "versionInfo": "v0.0.0-20230404182410-1ff89d7342da", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:deitch:magic:v0.0.0-20230404182410-1ff89d7342da:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/deitch/magic@v0.0.0-20230404182410-1ff89d7342da"}]}, {"name": "github.com/diskfs/go-diskfs", "SPDXID": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-cb131efbd31e0296", "versionInfo": "v1.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:diskfs:go-diskfs:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:diskfs:go_diskfs:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/diskfs/go-diskfs@v1.9.4"}]}, {"name": "github.com/distribution/reference", "SPDXID": "SPDXRef-Package-go-module-github.com-distribution-reference-57cb16f3594bdfbf", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:distribution:reference:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/distribution/reference@v0.6.0"}]}, {"name": "github.com/docker/cli", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-cli-bcbfbc11d6dab1a2", "versionInfo": "v29.8.2+incompatible", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:cli:v29.8.2\\+incompatible:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/cli@v29.8.2%2Bincompatible"}]}, {"name": "github.com/docker/docker-credential-helpers", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-bba69ae05aa79c1e", "versionInfo": "v0.9.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.8"}]}, {"name": "github.com/docker/go-connections", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-connections-ef23980a56cbac10", "versionInfo": "v0.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-connections@v0.8.1"}]}, {"name": "github.com/docker/go-units", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-units-a4a57ee8c74d650f", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-units@v0.5.0"}]}, {"name": "github.com/dsnet/compress", "SPDXID": "SPDXRef-Package-go-module-github.com-dsnet-compress-7c0933ca79561f11", "versionInfo": "v0.0.2-0.20230904184137-39efe44ab707", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dsnet:compress:v0.0.2-0.20230904184137-39efe44ab707:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/dsnet/compress@v0.0.2-0.20230904184137-39efe44ab707"}]}, {"name": "github.com/dustin/go-humanize", "SPDXID": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-fa4417685f091bd2", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dustin:go-humanize:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dustin:go_humanize:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/dustin/go-humanize@v1.1.0"}]}, {"name": "github.com/elliotchance/phpserialize", "SPDXID": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-c5abb11c3ea6e681", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:elliotchance:phpserialize:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/elliotchance/phpserialize@v1.4.0"}]}, {"name": "github.com/emirpasic/gods", "SPDXID": "SPDXRef-Package-go-module-github.com-emirpasic-gods-85762e38c0ad17f0", "versionInfo": "v1.18.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:emirpasic:gods:v1.18.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/emirpasic/gods@v1.18.1"}]}, {"name": "github.com/envoyproxy/go-control-plane/envoy", "SPDXID": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-039f852a33b92d0b", "versionInfo": "v1.37.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:go-control-plane\\/envoy:v1.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:go_control_plane\\/envoy:v1.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/envoyproxy/go-control-plane@v1.37.0#envoy"}]}, {"name": "github.com/envoyproxy/protoc-gen-validate", "SPDXID": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-7fa5ed572fc22ee1", "versionInfo": "v1.3.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3"}]}, {"name": "github.com/facebookincubator/nvdtools", "SPDXID": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-85d3974960a67798", "versionInfo": "v0.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:facebookincubator:nvdtools:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/facebookincubator/nvdtools@v0.1.5"}]}, {"name": "github.com/fatih/color", "SPDXID": "SPDXRef-Package-go-module-github.com-fatih-color-00d6c54b6519ec6b", "versionInfo": "v1.19.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fatih:color:v1.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fatih/color@v1.19.0"}]}, {"name": "github.com/felixge/fgprof", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-fgprof-b5e875d79d22c9c6", "versionInfo": "v0.9.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:fgprof:v0.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/fgprof@v0.9.5"}]}, {"name": "github.com/felixge/httpsnoop", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-b9a2cc3edeb1ad24", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.1.0"}]}, {"name": "github.com/fsnotify/fsnotify", "SPDXID": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-0ef613442226576b", "versionInfo": "v1.10.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1"}]}, {"name": "github.com/gabriel-vasile/mimetype", "SPDXID": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-8cd26195081bd490", "versionInfo": "v1.4.15", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gabriel-vasile:mimetype:v1.4.15:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gabriel_vasile:mimetype:v1.4.15:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gabriel:mimetype:v1.4.15:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.15"}]}, {"name": "github.com/github/go-spdx/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-3a2cdcacf1f99dbc", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github:go-spdx\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github:go_spdx\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/github/go-spdx@v2.7.0#v2"}]}, {"name": "github.com/go-git/gcfg", "SPDXID": "SPDXRef-Package-go-module-github.com-go-git-gcfg-93c4800e38e91fa0", "versionInfo": "v1.5.1-0.20230307220236-3a3c6141e376", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376"}]}, {"name": "github.com/go-git/go-billy/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-fc25ff5d482eb5c7", "versionInfo": "v5.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-git/go-billy@v5.9.1#v5"}]}, {"name": "github.com/go-git/go-git/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-742aca26c57f6ffe", "versionInfo": "v5.19.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-git/go-git@v5.19.2#v5"}]}, {"name": "github.com/go-jose/go-jose/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-c00d005f6322366c", "versionInfo": "v4.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v4.1.5#v4"}]}, {"name": "github.com/go-logr/logr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-f1f5c037241253b5", "versionInfo": "v1.4.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.4"}]}, {"name": "github.com/go-logr/stdr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-57551e23f2d303e8", "versionInfo": "v1.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2"}]}, {"name": "github.com/go-restruct/restruct", "SPDXID": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-6217abe5cfff3196", "versionInfo": "v1.2.0-alpha", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-restruct/restruct@v1.2.0-alpha"}]}, {"name": "github.com/go-viper/mapstructure/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-8d6dcceb945f14aa", "versionInfo": "v2.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure@v2.5.0#v2"}]}, {"name": "github.com/goccy/go-yaml", "SPDXID": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-f31c9344f15e8655", "versionInfo": "v1.19.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goccy:go-yaml:v1.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goccy:go_yaml:v1.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/goccy/go-yaml@v1.19.2"}]}, {"name": "github.com/gohugoio/hashstructure", "SPDXID": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-4602124246c7330e", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gohugoio:hashstructure:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gohugoio/hashstructure@v0.6.0"}]}, {"name": "github.com/golang/groupcache", "SPDXID": "SPDXRef-Package-go-module-github.com-golang-groupcache-fa3f8b715c99cdc7", "versionInfo": "v0.0.0-20241129210726-2c02b8208cf8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:groupcache:v0.0.0-20241129210726-2c02b8208cf8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8"}]}, {"name": "github.com/google/go-cmp", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-cmp-9c2c26897326f5d7", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-cmp@v0.7.0"}]}, {"name": "github.com/google/go-containerregistry", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-6e754f69326821ba", "versionInfo": "v0.22.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-containerregistry:v0.22.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_containerregistry:v0.22.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-containerregistry@v0.22.1"}]}, {"name": "github.com/google/licensecheck", "SPDXID": "SPDXRef-Package-go-module-github.com-google-licensecheck-27d7eba06299bea6", "versionInfo": "v0.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:licensecheck:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/licensecheck@v0.3.1"}]}, {"name": "github.com/google/pprof", "SPDXID": "SPDXRef-Package-go-module-github.com-google-pprof-89eb324efd6718f0", "versionInfo": "v0.0.0-20260802141513-ef3492d7dac3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:pprof:v0.0.0-20260802141513-ef3492d7dac3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/pprof@v0.0.0-20260802141513-ef3492d7dac3"}]}, {"name": "github.com/google/s2a-go", "SPDXID": "SPDXRef-Package-go-module-github.com-google-s2a-go-18c9902d2911a42f", "versionInfo": "v0.1.9", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a-go:v0.1.9:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a_go:v0.1.9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/s2a-go@v0.1.9"}]}, {"name": "github.com/google/uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-eb0585a27f8e84ce", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0"}]}, {"name": "github.com/googleapis/enterprise-certificate-proxy", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-1e1a7aef80a6c68c", "versionInfo": "v0.3.20", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.20:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.20:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.20"}]}, {"name": "github.com/googleapis/gax-go/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-001bfd36625562ba", "versionInfo": "v2.24.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.24.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax_go\\/v2:v2.24.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/gax-go@v2.24.0#v2"}]}, {"name": "github.com/gookit/color", "SPDXID": "SPDXRef-Package-go-module-github.com-gookit-color-0e7bbefeb42117a5", "versionInfo": "v1.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gookit:color:v1.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gookit/color@v1.6.1"}]}, {"name": "github.com/gpustack/gguf-parser-go", "SPDXID": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-1b4366cbd170c64a", "versionInfo": "v0.26.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gpustack:gguf-parser-go:v0.26.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gpustack:gguf_parser_go:v0.26.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gpustack/gguf-parser-go@v0.26.3"}]}, {"name": "github.com/hashicorp/aws-sdk-go-base/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-3ab23999912b59f0", "versionInfo": "v2.0.0-beta.74", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:aws-sdk-go-base\\/v2:v2.0.0-beta.74:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:aws_sdk_go_base\\/v2:v2.0.0-beta.74:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/aws-sdk-go-base@v2.0.0-beta.74#v2"}]}, {"name": "github.com/hashicorp/errwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-4f81adc1b1c6d4d8", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0"}]}, {"name": "github.com/hashicorp/go-cleanhttp", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-e9447c4bc4db8f53", "versionInfo": "v0.5.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2"}]}, {"name": "github.com/hashicorp/go-getter", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-9e88b1a4cc0496bc", "versionInfo": "v1.8.9", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-getter:v1.8.9:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_getter:v1.8.9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-getter@v1.8.9"}]}, {"name": "github.com/hashicorp/go-multierror", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-72f000ad7d3513b0", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1"}]}, {"name": "github.com/hashicorp/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-b12b030b3252b6aa", "versionInfo": "v1.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-version:v1.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_version:v1.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-version@v1.9.0"}]}, {"name": "github.com/hashicorp/golang-lru/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-f5e8e26eda472023", "versionInfo": "v2.0.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:golang-lru\\/v2:v2.0.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:golang_lru\\/v2:v2.0.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/golang-lru@v2.0.7#v2"}]}, {"name": "github.com/hashicorp/hcl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-d5078ef3e2b50a6b", "versionInfo": "v2.25.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:hcl\\/v2:v2.25.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/hcl@v2.25.0#v2"}]}, {"name": "github.com/henvic/httpretty", "SPDXID": "SPDXRef-Package-go-module-github.com-henvic-httpretty-cc6c6f82c426f0e1", "versionInfo": "v0.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:henvic:httpretty:v0.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/henvic/httpretty@v0.1.4"}]}, {"name": "github.com/huandu/xstrings", "SPDXID": "SPDXRef-Package-go-module-github.com-huandu-xstrings-2595fa3f4599d6c9", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:huandu:xstrings:v1.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/huandu/xstrings@v1.5.0"}]}, {"name": "github.com/iancoleman/strcase", "SPDXID": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-f10e8d6aab87e61f", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:iancoleman:strcase:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/iancoleman/strcase@v0.3.0"}]}, {"name": "github.com/jbenet/go-context", "SPDXID": "SPDXRef-Package-go-module-github.com-jbenet-go-context-2b32b589248bb664", "versionInfo": "v0.0.0-20150711004518-d14ea06fba99", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jbenet:go-context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jbenet:go_context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99"}]}, {"name": "github.com/jedib0t/go-pretty/v6", "SPDXID": "SPDXRef-Package-go-module-github.com-jedib0t-go-pretty-v6-c4ef1d361a9a33bc", "versionInfo": "v6.8.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jedib0t:go-pretty\\/v6:v6.8.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jedib0t:go_pretty\\/v6:v6.8.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jedib0t/go-pretty@v6.8.3#v6"}]}, {"name": "github.com/jinzhu/copier", "SPDXID": "SPDXRef-Package-go-module-github.com-jinzhu-copier-1fe08547db4a53e1", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jinzhu:copier:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jinzhu/copier@v0.4.0"}]}, {"name": "github.com/json-iterator/go", "SPDXID": "SPDXRef-Package-go-module-github.com-json-iterator-go-9a2e4462d83b7521", "versionInfo": "v1.1.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json_iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/json-iterator/go@v1.1.12"}]}, {"name": "github.com/kastenhq/goversion", "SPDXID": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-e366299bde179411", "versionInfo": "v0.0.0-20230811215019-93b2f8823953", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kastenhq:goversion:v0.0.0-20230811215019-93b2f8823953:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kastenhq/goversion@v0.0.0-20230811215019-93b2f8823953"}]}, {"name": "github.com/kevinburke/ssh_config", "SPDXID": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-90185830b5e0c0f5", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kevinburke:ssh-config:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kevinburke:ssh_config:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kevinburke/ssh_config@v1.2.0"}]}, {"name": "github.com/klauspost/compress", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-compress-19b825adf1a22f1e", "versionInfo": "v1.20.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:compress:v1.20.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/compress@v1.20.1"}]}, {"name": "github.com/klauspost/pgzip", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-7a76fa69fbaf9eb6", "versionInfo": "v1.2.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:pgzip:v1.2.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/pgzip@v1.2.6"}]}, {"name": "github.com/lucasb-eyer/go-colorful", "SPDXID": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-7f789043e802f18c", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb-eyer:go-colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb-eyer:go_colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb_eyer:go-colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb_eyer:go_colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb:go-colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb:go_colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/lucasb-eyer/go-colorful@v1.3.0"}]}, {"name": "github.com/mattn/go-colorable", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-5d10b0748067dc39", "versionInfo": "v0.1.14", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-colorable:v0.1.14:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_colorable:v0.1.14:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-colorable@v0.1.14"}]}, {"name": "github.com/mattn/go-isatty", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-f4c9c88387beedc9", "versionInfo": "v0.0.24", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-isatty:v0.0.24:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_isatty:v0.0.24:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-isatty@v0.0.24"}]}, {"name": "github.com/mattn/go-runewidth", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-08cac120b1536c53", "versionInfo": "v0.0.27", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-runewidth:v0.0.27:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_runewidth:v0.0.27:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-runewidth@v0.0.27"}]}, {"name": "github.com/mgutz/ansi", "SPDXID": "SPDXRef-Package-go-module-github.com-mgutz-ansi-e2dd9bac2ba5039f", "versionInfo": "v0.0.0-20200706080929-d51e80ef957d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mgutz:ansi:v0.0.0-20200706080929-d51e80ef957d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20200706080929-d51e80ef957d"}]}, {"name": "github.com/mholt/archives", "SPDXID": "SPDXRef-Package-go-module-github.com-mholt-archives-82ff43744d04ecfa", "versionInfo": "v0.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mholt:archives:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mholt/archives@v0.1.5"}]}, {"name": "github.com/mikelolasagasti/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-b92c735a7286cb95", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mikelolasagasti:xz:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mikelolasagasti/xz@v1.0.1"}]}, {"name": "github.com/minio/minlz", "SPDXID": "SPDXRef-Package-go-module-github.com-minio-minlz-c9891e4191aa5ace", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:minio:minlz:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/minio/minlz@v1.0.1"}]}, {"name": "github.com/mitchellh/copystructure", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-f469b53413ff7076", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:copystructure:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/copystructure@v1.2.0"}]}, {"name": "github.com/mitchellh/go-homedir", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-9b82ef796628d33a", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go-homedir:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go_homedir:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0"}]}, {"name": "github.com/mitchellh/go-wordwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-42d185afd72a1a9e", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go-wordwrap:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go_wordwrap:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1"}]}, {"name": "github.com/mitchellh/reflectwalk", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-85186a52cf720ae6", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:reflectwalk:v1.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2"}]}, {"name": "github.com/moby/docker-image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-a3cedba212706fc9", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker-image-spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker_image_spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1"}]}, {"name": "github.com/moby/locker", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-locker-8f5f52e9a50c87d3", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:locker:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/locker@v1.0.1"}]}, {"name": "github.com/moby/moby/api", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-api-b23e8aab148a0f45", "versionInfo": "v1.56.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/api:v1.56.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v1.56.0#api"}]}, {"name": "github.com/moby/moby/client", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-client-8fa65411804d13b5", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/client:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v0.6.0#client"}]}, {"name": "github.com/moby/sys/mountinfo", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-e2fa5a5c9ba69824", "versionInfo": "v0.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/mountinfo:v0.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.2#mountinfo"}]}, {"name": "github.com/moby/sys/signal", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-signal-9cfcffeff8f34c46", "versionInfo": "v0.7.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/signal:v0.7.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.1#signal"}]}, {"name": "github.com/moby/sys/user", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-user-764fe4ba1ba5f636", "versionInfo": "v0.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/user:v0.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.4.1#user"}]}, {"name": "github.com/moby/sys/userns", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-userns-f2ca3bfd8b70cc64", "versionInfo": "v0.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/userns:v0.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.2.1#userns"}]}, {"name": "github.com/modern-go/concurrent", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-5b3ff5624d3eb4b8", "versionInfo": "v0.0.0-20180306012644-bacd9c7ef1dd", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd"}]}, {"name": "github.com/modern-go/reflect2", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-b96fe175a96ae97d", "versionInfo": "v1.0.3-0.20250322232337-35a7c28c31ee", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee"}]}, {"name": "github.com/muesli/ansi", "SPDXID": "SPDXRef-Package-go-module-github.com-muesli-ansi-f82c9dded26171f6", "versionInfo": "v0.0.0-20230316100256-276c6243b2f6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:muesli:ansi:v0.0.0-20230316100256-276c6243b2f6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/muesli/ansi@v0.0.0-20230316100256-276c6243b2f6"}]}, {"name": "github.com/muesli/cancelreader", "SPDXID": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-2203b39fb1ffa178", "versionInfo": "v0.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:muesli:cancelreader:v0.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/muesli/cancelreader@v0.2.2"}]}, {"name": "github.com/muesli/termenv", "SPDXID": "SPDXRef-Package-go-module-github.com-muesli-termenv-26f4f5efdafb23b0", "versionInfo": "v0.16.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:muesli:termenv:v0.16.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/muesli/termenv@v0.16.0"}]}, {"name": "github.com/nix-community/go-nix", "SPDXID": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-bc41e3495c043bce", "versionInfo": "v0.0.0-20250101154619-4bdde671e0a1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix-community:go-nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix-community:go_nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix_community:go-nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix_community:go_nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix:go-nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix:go_nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/nix-community/go-nix@v0.0.0-20250101154619-4bdde671e0a1"}]}, {"name": "github.com/nwaples/rardecode/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-7163216d75ab743d", "versionInfo": "v2.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nwaples:rardecode\\/v2:v2.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/nwaples/rardecode@v2.4.1#v2"}]}, {"name": "github.com/olekukonko/cat", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-cat-aeb3a6a7bcab188f", "versionInfo": "v0.0.0-20250911104152-50322a0618f6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:cat:v0.0.0-20250911104152-50322a0618f6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/cat@v0.0.0-20250911104152-50322a0618f6"}]}, {"name": "github.com/olekukonko/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-errors-37b4a9b80fbf352d", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:errors:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/errors@v1.2.0"}]}, {"name": "github.com/olekukonko/ll", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-ll-58d5582fae812228", "versionInfo": "v0.1.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:ll:v0.1.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/ll@v0.1.6"}]}, {"name": "github.com/olekukonko/tablewriter", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-c1ba6a9628a30972", "versionInfo": "v1.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:tablewriter:v1.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/tablewriter@v1.1.5"}]}, {"name": "github.com/opencontainers/go-digest", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-2c4fa45519769b33", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0"}]}, {"name": "github.com/opencontainers/image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-a5465d726b15e664", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1"}]}, {"name": "github.com/opencontainers/runtime-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-f1760502f86e2150", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime-spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime_spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runtime-spec@v1.3.0"}]}, {"name": "github.com/pborman/indent", "SPDXID": "SPDXRef-Package-go-module-github.com-pborman-indent-5bf550ae7cdaf7b6", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pborman:indent:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pborman/indent@v1.2.1"}]}, {"name": "github.com/pelletier/go-toml", "SPDXID": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-20d74e1f46a92a18", "versionInfo": "v1.9.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go-toml:v1.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go_toml:v1.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pelletier/go-toml@v1.9.5"}]}, {"name": "github.com/pelletier/go-toml/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-1e893dfdbe633dba", "versionInfo": "v2.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go-toml\\/v2:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go_toml\\/v2:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pelletier/go-toml@v2.4.3#v2"}]}, {"name": "github.com/pierrec/lz4/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-6acbbcd34291f5a0", "versionInfo": "v4.1.26", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pierrec:lz4\\/v4:v4.1.26:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pierrec/lz4@v4.1.26#v4"}]}, {"name": "github.com/piprate/json-gold", "SPDXID": "SPDXRef-Package-go-module-github.com-piprate-json-gold-cc76c1fbdd9e54b9", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:piprate:json-gold:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:piprate:json_gold:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/piprate/json-gold@v0.7.0"}]}, {"name": "github.com/pjbgf/sha1cd", "SPDXID": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-7b68ef4e752d10c2", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pjbgf:sha1cd:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pjbgf/sha1cd@v0.6.0"}]}, {"name": "github.com/pkg/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-errors-7a1f5d0bf7bf8c77", "versionInfo": "v0.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1"}]}, {"name": "github.com/pkg/profile", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-profile-3265c8d23395474f", "versionInfo": "v1.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:profile:v1.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/profile@v1.7.0"}]}, {"name": "github.com/pkg/xattr", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-xattr-80629bae10219885", "versionInfo": "v0.4.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:xattr:v0.4.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/xattr@v0.4.12"}]}, {"name": "github.com/pquerna/cachecontrol", "SPDXID": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-f0f7cb9f78d83735", "versionInfo": "v0.0.0-20180517163645-1555304b9b35", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pquerna:cachecontrol:v0.0.0-20180517163645-1555304b9b35:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pquerna/cachecontrol@v0.0.0-20180517163645-1555304b9b35"}]}, {"name": "github.com/remyoudompheng/bigfft", "SPDXID": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-ce2d90700744ec35", "versionInfo": "v0.0.0-20230129092748-24d4a6f8daec", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:remyoudompheng:bigfft:v0.0.0-20230129092748-24d4a6f8daec:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec"}]}, {"name": "github.com/rivo/uniseg", "SPDXID": "SPDXRef-Package-go-module-github.com-rivo-uniseg-6a10ed3a5407ea69", "versionInfo": "v0.4.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rivo:uniseg:v0.4.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/rivo/uniseg@v0.4.7"}]}, {"name": "github.com/rust-secure-code/go-rustaudit", "SPDXID": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-c49fdacec2594820", "versionInfo": "v0.0.0-20250226111315-e20ec32e963c", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure-code:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure-code:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure_code:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure_code:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/rust-secure-code/go-rustaudit@v0.0.0-20250226111315-e20ec32e963c"}]}, {"name": "github.com/sagikazarmark/locafero", "SPDXID": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-efe911257d126e00", "versionInfo": "v0.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sagikazarmark:locafero:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0"}]}, {"name": "github.com/saintfish/chardet", "SPDXID": "SPDXRef-Package-go-module-github.com-saintfish-chardet-0b0a504e53e99cc9", "versionInfo": "v0.0.0-20230101081208-5e3ef4b5456d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:saintfish:chardet:v0.0.0-20230101081208-5e3ef4b5456d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/saintfish/chardet@v0.0.0-20230101081208-5e3ef4b5456d"}]}, {"name": "github.com/sassoftware/go-rpmutils", "SPDXID": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-a95e397561a70321", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sassoftware:go-rpmutils:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sassoftware:go_rpmutils:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sassoftware/go-rpmutils@v0.4.0"}]}, {"name": "github.com/scylladb/go-set", "SPDXID": "SPDXRef-Package-go-module-github.com-scylladb-go-set-d5914170cd48c156", "versionInfo": "v1.0.3-0.20200225121959-cc7b2070d91e", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:scylladb:go-set:v1.0.3-0.20200225121959-cc7b2070d91e:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:scylladb:go_set:v1.0.3-0.20200225121959-cc7b2070d91e:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/scylladb/go-set@v1.0.3-0.20200225121959-cc7b2070d91e"}]}, {"name": "github.com/sergi/go-diff", "SPDXID": "SPDXRef-Package-go-module-github.com-sergi-go-diff-7d5e6ce92af33a4c", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sergi:go-diff:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sergi:go_diff:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sergi/go-diff@v1.4.0"}]}, {"name": "github.com/shopspring/decimal", "SPDXID": "SPDXRef-Package-go-module-github.com-shopspring-decimal-1f95b4c3d528e754", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:shopspring:decimal:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/shopspring/decimal@v1.4.0"}]}, {"name": "github.com/sirupsen/logrus", "SPDXID": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-5bfe7f35ccc8f59e", "versionInfo": "v1.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sirupsen:logrus:v1.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sirupsen/logrus@v1.10.2"}]}, {"name": "github.com/skeema/knownhosts", "SPDXID": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-84665cc27ccbf4bc", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:skeema:knownhosts:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/skeema/knownhosts@v1.3.1"}]}, {"name": "github.com/smallnest/ringbuffer", "SPDXID": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-e84e454b2a868689", "versionInfo": "v0.0.0-20241116012123-461381446e3d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:smallnest:ringbuffer:v0.0.0-20241116012123-461381446e3d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/smallnest/ringbuffer@v0.0.0-20241116012123-461381446e3d"}]}, {"name": "github.com/sorairolake/lzip-go", "SPDXID": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-14e658828df95cea", "versionInfo": "v0.3.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sorairolake:lzip-go:v0.3.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sorairolake:lzip_go:v0.3.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sorairolake/lzip-go@v0.3.8"}]}, {"name": "github.com/sourcegraph/conc", "SPDXID": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-4a03e59bfd3d6c22", "versionInfo": "v0.3.1-0.20240121214520-5f936abd7ae8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sourcegraph:conc:v0.3.1-0.20240121214520-5f936abd7ae8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8"}]}, {"name": "github.com/spdx/gordf", "SPDXID": "SPDXRef-Package-go-module-github.com-spdx-gordf-9fd0a261be0a7881", "versionInfo": "v0.0.0-20201111095634-7098f93598fb", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spdx:gordf:v0.0.0-20201111095634-7098f93598fb:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spdx/gordf@v0.0.0-20201111095634-7098f93598fb"}]}, {"name": "github.com/spdx/tools-golang", "SPDXID": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-826ecc168d787c11", "versionInfo": "v0.6.0-rc4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spdx:tools-golang:v0.6.0-rc4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spdx:tools_golang:v0.6.0-rc4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spdx/tools-golang@v0.6.0-rc4"}]}, {"name": "github.com/spf13/afero", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-afero-b41944b9afb76ebf", "versionInfo": "v1.15.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:afero:v1.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/afero@v1.15.0"}]}, {"name": "github.com/spf13/cast", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cast-1c83651d2fde1cd3", "versionInfo": "v1.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cast:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cast@v1.10.0"}]}, {"name": "github.com/spf13/cobra", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cobra-a0fa26ad2c1706af", "versionInfo": "v1.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2"}]}, {"name": "github.com/spf13/pflag", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-0a3e8e0000dd9d12", "versionInfo": "v1.0.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10"}]}, {"name": "github.com/spf13/viper", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-viper-02cd0675a0468b10", "versionInfo": "v1.21.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:viper:v1.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/viper@v1.21.0"}]}, {"name": "github.com/spiffe/go-spiffe/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-71c81822b1e9d1e5", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spiffe:go-spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spiffe:go_spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spiffe/go-spiffe@v2.7.0#v2"}]}, {"name": "github.com/subosito/gotenv", "SPDXID": "SPDXRef-Package-go-module-github.com-subosito-gotenv-7f6e98c5e7aca347", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:subosito:gotenv:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/subosito/gotenv@v1.6.0"}]}, {"name": "github.com/sylabs/sif/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-5611a27d7ac7474a", "versionInfo": "v2.24.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sylabs:sif\\/v2:v2.24.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sylabs/sif@v2.24.2#v2"}]}, {"name": "github.com/sylabs/squashfs", "SPDXID": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-bdaf5e4aaff72519", "versionInfo": "v1.0.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sylabs:squashfs:v1.0.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sylabs/squashfs@v1.0.6"}]}, {"name": "github.com/tailscale/hujson", "SPDXID": "SPDXRef-Package-go-module-github.com-tailscale-hujson-fe108b0881fc655e", "versionInfo": "v0.0.0-20260302212456-ecc657c15afd", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tailscale:hujson:v0.0.0-20260302212456-ecc657c15afd:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tailscale/hujson@v0.0.0-20260302212456-ecc657c15afd"}]}, {"name": "github.com/therootcompany/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-therootcompany-xz-cb2d33f009bda628", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:therootcompany:xz:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/therootcompany/xz@v1.0.1"}]}, {"name": "github.com/ulikunitz/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-7137c6ccad005412", "versionInfo": "v0.5.17", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ulikunitz:xz:v0.5.17:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ulikunitz/xz@v0.5.17"}]}, {"name": "github.com/vbatts/go-mtree", "SPDXID": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-f351e1b55d009e69", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:go-mtree:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:go_mtree:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbatts/go-mtree@v0.7.0"}]}, {"name": "github.com/vifraa/gopom", "SPDXID": "SPDXRef-Package-go-module-github.com-vifraa-gopom-fae08c471baae6e9", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vifraa:gopom:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vifraa/gopom@v1.0.0"}]}, {"name": "github.com/wagoodman/go-partybus", "SPDXID": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-eff97c3330427173", "versionInfo": "v0.0.0-20230516145632-8ccac152c651", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go-partybus:v0.0.0-20230516145632-8ccac152c651:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go_partybus:v0.0.0-20230516145632-8ccac152c651:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/wagoodman/go-partybus@v0.0.0-20230516145632-8ccac152c651"}]}, {"name": "github.com/wagoodman/go-progress", "SPDXID": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-f9feb60a373f8baf", "versionInfo": "v0.0.0-20260303201901-10176f79b2c0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go-progress:v0.0.0-20260303201901-10176f79b2c0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go_progress:v0.0.0-20260303201901-10176f79b2c0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/wagoodman/go-progress@v0.0.0-20260303201901-10176f79b2c0"}]}, {"name": "github.com/xanzy/ssh-agent", "SPDXID": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-5f2497f630a39a6a", "versionInfo": "v0.3.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xanzy:ssh-agent:v0.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xanzy:ssh_agent:v0.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3"}]}, {"name": "github.com/xi2/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-xi2-xz-1b890aee07559a00", "versionInfo": "v0.0.0-20171230120015-48954b6210f8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xi2:xz:v0.0.0-20171230120015-48954b6210f8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/xi2/xz@v0.0.0-20171230120015-48954b6210f8"}]}, {"name": "github.com/xo/terminfo", "SPDXID": "SPDXRef-Package-go-module-github.com-xo-terminfo-ee420fbd0a9922d6", "versionInfo": "v0.0.0-20220910002029-abceb7e1c41e", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xo:terminfo:v0.0.0-20220910002029-abceb7e1c41e:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/xo/terminfo@v0.0.0-20220910002029-abceb7e1c41e"}]}, {"name": "github.com/zclconf/go-cty", "SPDXID": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-2074b1a8f7f766d1", "versionInfo": "v1.19.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go-cty:v1.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go_cty:v1.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/zclconf/go-cty@v1.19.0"}]}, {"name": "github.com/zyedidia/generic", "SPDXID": "SPDXRef-Package-go-module-github.com-zyedidia-generic-0156ecc9cdffef5e", "versionInfo": "v1.2.2-0.20230320175451-4410d2372cb1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zyedidia:generic:v1.2.2-0.20230320175451-4410d2372cb1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/zyedidia/generic@v1.2.2-0.20230320175451-4410d2372cb1"}]}, {"name": "go.opentelemetry.io/auto/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-d63ace6d338894ca", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1"}]}, {"name": "go.opentelemetry.io/contrib/detectors/gcp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-7067b21e2031085a", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:detectors\\/gcp:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/detectors@v1.44.0#gcp"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-f173863292b8d677", "versionInfo": "v0.71.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/google.golang.org\\/grpc\\/otelgrpc:v0.71.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.71.0#google.golang.org/grpc/otelgrpc"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-2baae36713832565", "versionInfo": "v0.71.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.71.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.71.0#net/http/otelhttp"}]}, {"name": "go.opentelemetry.io/otel", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-4865e8a7a186d4f4", "versionInfo": "v1.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.46.0"}]}, {"name": "go.opentelemetry.io/otel/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-5fae9dbcdc04114f", "versionInfo": "v1.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:metric:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.46.0"}]}, {"name": "go.opentelemetry.io/otel/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-6e4d66dff9cf2d9c", "versionInfo": "v1.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:sdk:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.46.0"}]}, {"name": "go.opentelemetry.io/otel/sdk/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-16f5da1f3d279f3e", "versionInfo": "v1.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:sdk\\/metric:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.46.0#metric"}]}, {"name": "go.opentelemetry.io/otel/trace", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-8e604804d292e726", "versionInfo": "v1.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:trace:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.46.0"}]}, {"name": "go.yaml.in/yaml/v3", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-718e7186b220be64", "versionInfo": "v3.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5"}]}, {"name": "go4.org", "SPDXID": "SPDXRef-Package-go-module-go4.org-8a66e013ba4029d1", "versionInfo": "v0.0.0-20230225012048-214862532bf5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go4.org@v0.0.0-20230225012048-214862532bf5"}]}, {"name": "golang.org/x/crypto", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-f85c2bb7eded4d61", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ssh:v0.57.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.57.0"}]}, {"name": "golang.org/x/exp", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-exp-269e794bd0a3225a", "versionInfo": "v0.0.0-20260410095643-746e56fc9e2f", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/exp:v0.0.0-20260410095643-746e56fc9e2f:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/exp@v0.0.0-20260410095643-746e56fc9e2f"}]}, {"name": "golang.org/x/mod", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-mod-0451debb142001ea", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/mod:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/mod@v0.41.0"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-34f8fdb7564de4bd", "versionInfo": "v0.59.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.59.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.59.0"}]}, {"name": "golang.org/x/oauth2", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-oauth2-4b2002bf2b5b7a90", "versionInfo": "v0.36.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/oauth2:v0.36.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/oauth2@v0.36.0"}]}, {"name": "golang.org/x/sync", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-3013fe9b07e604ca", "versionInfo": "v0.23.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.23.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sync@v0.23.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-fa253031e042c9b3", "versionInfo": "v0.48.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.48.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.48.0"}]}, {"name": "golang.org/x/term", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-term-b41d0231ac38fc09", "versionInfo": "v0.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/term:v0.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/term@v0.46.0"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-986247bc6447cc68", "versionInfo": "v0.42.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.42.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.42.0"}]}, {"name": "golang.org/x/time", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-time-0315eefd8c898d56", "versionInfo": "v0.16.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/time:v0.16.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/time@v0.16.0"}]}, {"name": "golang.org/x/tools", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-tools-1af10d989c5fd75f", "versionInfo": "v0.50.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/tools:v0.50.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/tools@v0.50.0"}]}, {"name": "golang.org/x/xerrors", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-xerrors-9b1797490b0b55b9", "versionInfo": "v0.0.0-20231012003039-104605ab7028", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/xerrors:v0.0.0-20231012003039-104605ab7028:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/xerrors@v0.0.0-20231012003039-104605ab7028"}]}, {"name": "google.golang.org/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-api-d71a2ad67b06ad10", "versionInfo": "v0.294.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:api:v0.294.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/api@v0.294.0"}]}, {"name": "google.golang.org/genproto", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-5ad43d0e1afbc47f", "versionInfo": "v0.0.0-20260715232425-e75dac1f907d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260715232425-e75dac1f907d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto@v0.0.0-20260715232425-e75dac1f907d"}]}, {"name": "google.golang.org/genproto/googleapis/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-6967ca0436ef8595", "versionInfo": "v0.0.0-20260825221802-da73d73af1c5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260825221802-da73d73af1c5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260825221802-da73d73af1c5#api"}]}, {"name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-414d88058e4e800a", "versionInfo": "v0.0.0-20260825221802-da73d73af1c5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260825221802-da73d73af1c5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260825221802-da73d73af1c5#rpc"}]}, {"name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-ff454b551bdc14a9", "versionInfo": "v1.83.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:grpc:v1.83.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.83.2"}]}, {"name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-c897cbd00edd3fd7", "versionInfo": "v1.36.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.12"}]}, {"name": "gopkg.in/warnings.v0", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-2aa064d6b34a524f", "versionInfo": "v0.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/warnings.v0@v0.1.2"}]}, {"name": "howett.net/plist", "SPDXID": "SPDXRef-Package-go-module-howett.net-plist-a9988714e723756d", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/howett.net/plist@v1.0.1"}]}, {"name": "modernc.org/libc", "SPDXID": "SPDXRef-Package-go-module-modernc.org-libc-ed3192d7a1ec55a8", "versionInfo": "v1.75.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/libc@v1.75.7"}]}, {"name": "modernc.org/mathutil", "SPDXID": "SPDXRef-Package-go-module-modernc.org-mathutil-c83f1b706dc59f71", "versionInfo": "v1.7.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/mathutil@v1.7.1"}]}, {"name": "modernc.org/memory", "SPDXID": "SPDXRef-Package-go-module-modernc.org-memory-9716e41eb5bab06f", "versionInfo": "v1.12.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/memory@v1.12.1"}]}, {"name": "modernc.org/sqlite", "SPDXID": "SPDXRef-Package-go-module-modernc.org-sqlite-06beeaae9ebf5674", "versionInfo": "v1.59.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/sqlite@v1.59.0"}]}, {"name": "stdlib", "SPDXID": "SPDXRef-Package-go-module-stdlib-fc90a38b069ba9d9", "versionInfo": "go1.27.2-X:nodwarf5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:go:1.27.2:-:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/stdlib@1.27.2-X%3Anodwarf5"}]}, {"name": "syft", "SPDXID": "SPDXRef-Package-rpm-syft-af58e8f695eb21ff", "versionInfo": "1.54.1-0.2.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:syft:syft:1.54.1-0.2.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/syft@1.54.1-0.2.hum1?distro=hummingbird-1"}]}, {"name": "rpm-extracted/syft-1.54.1-0.2.hum1.s390x", "SPDXID": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "syft", "SPDXID": "SPDXRef-Package-rpm-syft-43be6f4debf1d067", "versionInfo": "1.54.1-0.2.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/lib/debug/usr/bin/syft-1.54.1-0.2.hum1.s390x.debug", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:syft:syft:1.54.1-0.2.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/syft@1.54.1-0.2.hum1?distro=hummingbird-1"}]}, {"name": "rpm-extracted/syft-debuginfo-1.54.1-0.2.hum1.s390x", "SPDXID": "SPDXRef-Directory-Root-syft-debuginfo-1.54.1-0.2.hum1.s390x", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/syft-debugsource-1.54.1-0.2.hum1.s390x", "SPDXID": "SPDXRef-Directory-Root-syft-debugsource-1.54.1-0.2.hum1.s390x", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "cel.dev/expr", "SPDXID": "SPDXRef-Package-go-module-cel.dev-expr-7a956891e81421f4", "versionInfo": "v0.25.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cel.dev/expr@v0.25.2"}]}, {"name": "cloud.google.com/go", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-441bc5c375b801bd", "versionInfo": "v0.123.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go@v0.123.0"}]}, {"name": "cloud.google.com/go/auth", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-beaa101cefb5d40e", "versionInfo": "v0.23.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth:v0.23.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.23.2"}]}, {"name": "cloud.google.com/go/auth/oauth2adapt", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-19e9f14715b2effb", "versionInfo": "v0.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:auth\\/oauth2adapt:v0.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/auth@v0.2.8#oauth2adapt"}]}, {"name": "cloud.google.com/go/compute/metadata", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-ae589fa3203790e0", "versionInfo": "v0.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:compute\\/metadata:v0.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/compute@v0.9.0#metadata"}]}, {"name": "cloud.google.com/go/iam", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-iam-e60458749477e2b4", "versionInfo": "v1.12.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:iam:v1.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/iam@v1.12.0"}]}, {"name": "cloud.google.com/go/monitoring", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-e4c818714c3a087d", "versionInfo": "v1.30.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:monitoring:v1.30.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/monitoring@v1.30.0"}]}, {"name": "cloud.google.com/go/storage", "SPDXID": "SPDXRef-Package-go-module-cloud.google.com-go-storage-1550467dc6d2776a", "versionInfo": "v1.65.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:storage:v1.65.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cloud.google.com/go/storage@v1.65.1"}]}, {"name": "dario.cat/mergo", "SPDXID": "SPDXRef-Package-go-module-dario.cat-mergo-79e823d45ca44f2b", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/dario.cat/mergo@v1.0.2"}]}, {"name": "github.com/BurntSushi/toml", "SPDXID": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-6468f36605676500", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:BurntSushi:toml:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/BurntSushi/toml@v1.6.0"}]}, {"name": "github.com/CycloneDX/cyclonedx-go", "SPDXID": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-cdb54a0f58471d34", "versionInfo": "v0.12.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:CycloneDX:cyclonedx-go:v0.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:CycloneDX:cyclonedx_go:v0.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/CycloneDX/cyclonedx-go@v0.12.0"}]}, {"name": "github.com/DataDog/zstd", "SPDXID": "SPDXRef-Package-go-module-github.com-DataDog-zstd-f3733eb846fe124f", "versionInfo": "v1.5.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:DataDog:zstd:v1.5.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/DataDog/zstd@v1.5.5"}]}, {"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp", "SPDXID": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-59c46f7e674fca4a", "versionInfo": "v1.33.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/detectors\\/gcp:v1.33.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/detectors\\/gcp:v1.33.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go@v1.33.0#detectors/gcp"}]}, {"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric", "SPDXID": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-d1296477b09d32a5", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/exporter\\/metric:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/exporter\\/metric:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go@v0.57.0#exporter/metric"}]}, {"name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping", "SPDXID": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-222e2eecfa3e07e0", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry-operations-go\\/internal\\/resourcemapping:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:GoogleCloudPlatform:opentelemetry_operations_go\\/internal\\/resourcemapping:v0.57.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go@v0.57.0#internal/resourcemapping"}]}, {"name": "github.com/Masterminds/goutils", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-917283320d06118c", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goutils_project:goutils:v1.1.1:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/goutils@v1.1.1"}]}, {"name": "github.com/Masterminds/semver/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-5a1c2e76f6907d33", "versionInfo": "v3.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:semver\\/v3:v3.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/semver@v3.5.0#v3"}]}, {"name": "github.com/Masterminds/sprig/v3", "SPDXID": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-d1e54e1446cf7ece", "versionInfo": "v3.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:Masterminds:sprig\\/v3:v3.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/Masterminds/sprig@v3.3.0#v3"}]}, {"name": "github.com/OneOfOne/xxhash", "SPDXID": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-c0a3b5b58bfd86ec", "versionInfo": "v1.2.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:OneOfOne:xxhash:v1.2.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/OneOfOne/xxhash@v1.2.8"}]}, {"name": "github.com/ProtonMail/go-crypto", "SPDXID": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-8e63cc4ad131400f", "versionInfo": "v1.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go-crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ProtonMail:go_crypto:v1.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ProtonMail/go-crypto@v1.4.1"}]}, {"name": "github.com/STARRY-S/zip", "SPDXID": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-292370361eef1c41", "versionInfo": "v0.2.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:STARRY-S:zip:v0.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:STARRY_S:zip:v0.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:STARRY:zip:v0.2.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/STARRY-S/zip@v0.2.3"}]}, {"name": "github.com/acarl005/stripansi", "SPDXID": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-8342471fec9556d8", "versionInfo": "v0.0.0-20180116102854-5a71ef0e047d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:acarl005:stripansi:v0.0.0-20180116102854-5a71ef0e047d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/acarl005/stripansi@v0.0.0-20180116102854-5a71ef0e047d"}]}, {"name": "github.com/acobaugh/osrelease", "SPDXID": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-819e720252113640", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:acobaugh:osrelease:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/acobaugh/osrelease@v0.1.0"}]}, {"name": "github.com/adrg/xdg", "SPDXID": "SPDXRef-Package-go-module-github.com-adrg-xdg-ee2c1c45c688ec20", "versionInfo": "v0.5.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:adrg:xdg:v0.5.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/adrg/xdg@v0.5.3"}]}, {"name": "github.com/agext/levenshtein", "SPDXID": "SPDXRef-Package-go-module-github.com-agext-levenshtein-d0b7355297abc602", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:agext:levenshtein:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/agext/levenshtein@v1.2.1"}]}, {"name": "github.com/anchore/bubbly", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-bubbly-b1f76bab1e7f1e6e", "versionInfo": "v0.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:bubbly:v0.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/bubbly@v0.2.2"}]}, {"name": "github.com/anchore/clio", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-clio-24676dd57a0d585a", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:clio:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/clio@v0.1.1"}]}, {"name": "github.com/anchore/fangs", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-fangs-9e34ac80322e8501", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:fangs:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/fangs@v0.1.1"}]}, {"name": "github.com/anchore/go-collections", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-collections-046469abf1c7c80f", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-collections:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_collections:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-collections@v0.1.1"}]}, {"name": "github.com/anchore/go-homedir", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-fdb154c5cbe184fb", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-homedir:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_homedir:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-homedir@v0.1.1"}]}, {"name": "github.com/anchore/go-logger", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-logger-e02c04b9b29ff6f9", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-logger:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_logger:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-logger@v0.2.0"}]}, {"name": "github.com/anchore/go-lzo", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-264e5d68451a54b3", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-lzo:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_lzo:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-lzo@v0.1.1"}]}, {"name": "github.com/anchore/go-macholibre", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-0d93a229362b9eda", "versionInfo": "v0.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-macholibre:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_macholibre:v0.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-macholibre@v0.1.1"}]}, {"name": "github.com/anchore/go-rpmdb", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-b23c8e0a9db0e52e", "versionInfo": "v0.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-rpmdb:v0.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_rpmdb:v0.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-rpmdb@v0.2.2"}]}, {"name": "github.com/anchore/go-struct-converter", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-fbe4887634fc6bfe", "versionInfo": "v0.2.0-rc2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-struct-converter:v0.2.0-rc2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_struct_converter:v0.2.0-rc2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-struct-converter@v0.2.0-rc2"}]}, {"name": "github.com/anchore/go-sync", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-sync-3c950f7363536a59", "versionInfo": "v0.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-sync:v0.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_sync:v0.1.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-sync@v0.1.2"}]}, {"name": "github.com/anchore/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-go-version-aa1cd66b250eccd1", "versionInfo": "v1.2.2-0.20200701162849-18adb9c92b9b", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go-version:v1.2.2-0.20200701162849-18adb9c92b9b:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:go_version:v1.2.2-0.20200701162849-18adb9c92b9b:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/go-version@v1.2.2-0.20200701162849-18adb9c92b9b"}]}, {"name": "github.com/anchore/packageurl-go", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-44eeba61630e23cd", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:packageurl-go:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:packageurl_go:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/packageurl-go@v0.2.0"}]}, {"name": "github.com/anchore/stereoscope", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-a22de2b67879157c", "versionInfo": "v0.3.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:stereoscope:v0.3.4:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/stereoscope@v0.3.4"}]}, {"name": "github.com/anchore/syft", "SPDXID": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "versionInfo": "v1.54.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:anchore:syft:v1.54.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/anchore/syft@v1.54.1"}]}, {"name": "github.com/andybalholm/brotli", "SPDXID": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-e5e1d20a08e3c550", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:andybalholm:brotli:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/andybalholm/brotli@v1.2.0"}]}, {"name": "github.com/apparentlymart/go-textseg/v15", "SPDXID": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-0b9d8426bcab7294", "versionInfo": "v15.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go-textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go_textseg\\/v15:v15.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/apparentlymart/go-textseg@v15.0.0#v15"}]}, {"name": "github.com/apparentlymart/go-textseg/v17", "SPDXID": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v17-69ef94475b8ed8f2", "versionInfo": "v17.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go-textseg\\/v17:v17.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:apparentlymart:go_textseg\\/v17:v17.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/apparentlymart/go-textseg@v17.0.1#v17"}]}, {"name": "github.com/aquasecurity/go-pep440-version", "SPDXID": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-30c3115baa985b1e", "versionInfo": "v0.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go-pep440-version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go_pep440_version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aquasecurity/go-pep440-version@v0.0.1"}]}, {"name": "github.com/aquasecurity/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-a66a6477613da8af", "versionInfo": "v0.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go-version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aquasecurity:go_version:v0.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aquasecurity/go-version@v0.0.1"}]}, {"name": "github.com/aws/aws-sdk-go-v2", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-52fdb67cf419b1fe", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.44.0"}]}, {"name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-a7d7a6db90ad1784", "versionInfo": "v1.7.20", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/aws\\/protocol\\/eventstream:v1.7.20:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/aws\\/protocol\\/eventstream:v1.7.20:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.7.20#aws/protocol/eventstream"}]}, {"name": "github.com/aws/aws-sdk-go-v2/config", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-9202fc07d91ea1a7", "versionInfo": "v1.32.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/config:v1.32.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/config:v1.32.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.32.40#config"}]}, {"name": "github.com/aws/aws-sdk-go-v2/credentials", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-bbc971f6d0d5e8c8", "versionInfo": "v1.19.39", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/credentials:v1.19.39:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/credentials:v1.19.39:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.19.39#credentials"}]}, {"name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-8053f053dd4acb7d", "versionInfo": "v1.18.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/feature\\/ec2\\/imds:v1.18.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/feature\\/ec2\\/imds:v1.18.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.18.40#feature/ec2/imds"}]}, {"name": "github.com/aws/aws-sdk-go-v2/internal/configsources", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-e1078e337c341618", "versionInfo": "v1.4.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/configsources:v1.4.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/configsources:v1.4.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.4.40#internal/configsources"}]}, {"name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-4f08f680208cbac3", "versionInfo": "v2.7.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/endpoints\\/v2:v2.7.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/endpoints\\/v2:v2.7.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v2.7.40#internal/endpoints/v2"}]}, {"name": "github.com/aws/aws-sdk-go-v2/internal/v4a", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-72acd93bd00372ca", "versionInfo": "v1.4.41", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/v4a:v1.4.41:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/v4a:v1.4.41:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.4.41#internal/v4a"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-28a6ed012045c07b", "versionInfo": "v1.13.19", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/accept-encoding:v1.13.19:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/accept_encoding:v1.13.19:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.13.19#service/internal/accept-encoding"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-2ff65b6ee65b41b4", "versionInfo": "v1.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/checksum:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/checksum:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.10.0#service/internal/checksum"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-f5cd480a4bddbeda", "versionInfo": "v1.13.40", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/presigned-url:v1.13.40:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/presigned_url:v1.13.40:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.13.40#service/internal/presigned-url"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-02ae7398cc5db673", "versionInfo": "v1.19.41", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/s3shared:v1.19.41:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/s3shared:v1.19.41:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.19.41#service/internal/s3shared"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/s3", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-ceec089a41be8e65", "versionInfo": "v1.108.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/s3:v1.108.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/s3:v1.108.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.108.0#service/s3"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/signin", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-c3ec90b2d424d0fb", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/signin:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/signin:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.6.0#service/signin"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/sso", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-5ddaea6d3a93b909", "versionInfo": "v1.34.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sso:v1.34.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sso:v1.34.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.34.0#service/sso"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/ssooidc", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-cddff3c7360d66b4", "versionInfo": "v1.39.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ssooidc:v1.39.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ssooidc:v1.39.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.39.0#service/ssooidc"}]}, {"name": "github.com/aws/aws-sdk-go-v2/service/sts", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-a27ef10a8b175a8f", "versionInfo": "v1.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sts:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sts:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.46.0#service/sts"}]}, {"name": "github.com/aws/smithy-go", "SPDXID": "SPDXRef-Package-go-module-github.com-aws-smithy-go-f93045cfc272b637", "versionInfo": "v1.28.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:smithy-go:v1.28.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aws:smithy_go:v1.28.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aws/smithy-go@v1.28.1"}]}, {"name": "github.com/aymanbagabas/go-osc52/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-3b4367cc4a18d0c4", "versionInfo": "v2.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aymanbagabas:go-osc52\\/v2:v2.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:aymanbagabas:go_osc52\\/v2:v2.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/aymanbagabas/go-osc52@v2.0.1#v2"}]}, {"name": "github.com/becheran/wildmatch-go", "SPDXID": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-d13ff812edd85626", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:becheran:wildmatch-go:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:becheran:wildmatch_go:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/becheran/wildmatch-go@v1.0.0"}]}, {"name": "github.com/bgentry/go-netrc", "SPDXID": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-9db9bfb13caad38a", "versionInfo": "v0.0.0-20140422174119-9fd32a8b3d3d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bgentry:go-netrc:v0.0.0-20140422174119-9fd32a8b3d3d:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bgentry:go_netrc:v0.0.0-20140422174119-9fd32a8b3d3d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bgentry/go-netrc@v0.0.0-20140422174119-9fd32a8b3d3d"}]}, {"name": "github.com/bitnami/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-bitnami-go-version-1bf81663903fc87c", "versionInfo": "v0.0.0-20250131085805-b1f57a8634ef", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bitnami:go-version:v0.0.0-20250131085805-b1f57a8634ef:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bitnami:go_version:v0.0.0-20250131085805-b1f57a8634ef:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bitnami/go-version@v0.0.0-20250131085805-b1f57a8634ef"}]}, {"name": "github.com/blakesmith/ar", "SPDXID": "SPDXRef-Package-go-module-github.com-blakesmith-ar-d360511ed70a01fe", "versionInfo": "v0.0.0-20190502131153-809d4375e1fb", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:blakesmith:ar:v0.0.0-20190502131153-809d4375e1fb:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/blakesmith/ar@v0.0.0-20190502131153-809d4375e1fb"}]}, {"name": "github.com/bmatcuk/doublestar/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-39037bf0cf95d4ab", "versionInfo": "v4.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bmatcuk:doublestar\\/v4:v4.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bmatcuk/doublestar@v4.10.2#v4"}]}, {"name": "github.com/bodgit/plumbing", "SPDXID": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-1fe71e3c6eae09f3", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bodgit:plumbing:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bodgit/plumbing@v1.3.0"}]}, {"name": "github.com/bodgit/sevenzip", "SPDXID": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-86ca12bbf2ca5df3", "versionInfo": "v1.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bodgit:sevenzip:v1.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bodgit/sevenzip@v1.6.1"}]}, {"name": "github.com/bodgit/windows", "SPDXID": "SPDXRef-Package-go-module-github.com-bodgit-windows-22bf17d3a5094620", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:bodgit:windows:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/bodgit/windows@v1.0.1"}]}, {"name": "github.com/cespare/xxhash/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-3f99cf4abc04658a", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cespare/xxhash@v2.3.0#v2"}]}, {"name": "github.com/charmbracelet/bubbles", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-a141bc7c3944d66e", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:bubbles:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/bubbles@v1.0.0"}]}, {"name": "github.com/charmbracelet/bubbletea", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-2ed39b3523fb55cb", "versionInfo": "v1.3.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:bubbletea:v1.3.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/bubbletea@v1.3.10"}]}, {"name": "github.com/charmbracelet/colorprofile", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-316fa69bed45d9b3", "versionInfo": "v0.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:colorprofile:v0.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/colorprofile@v0.4.3"}]}, {"name": "github.com/charmbracelet/harmonica", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-9cc237655b2d3d2b", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:harmonica:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/harmonica@v0.2.0"}]}, {"name": "github.com/charmbracelet/lipgloss", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-4192f9d237f420e2", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:lipgloss:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/lipgloss@v1.1.0"}]}, {"name": "github.com/charmbracelet/x/ansi", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-950ccd3949f827eb", "versionInfo": "v0.11.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:x\\/ansi:v0.11.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/x@v0.11.6#ansi"}]}, {"name": "github.com/charmbracelet/x/cellbuf", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-499e3c4e90ed5657", "versionInfo": "v0.0.15", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:x\\/cellbuf:v0.0.15:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/x@v0.0.15#cellbuf"}]}, {"name": "github.com/charmbracelet/x/term", "SPDXID": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-1b763b3ebabba928", "versionInfo": "v0.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:charmbracelet:x\\/term:v0.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/charmbracelet/x@v0.2.2#term"}]}, {"name": "github.com/clipperhouse/displaywidth", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-337d966309354b2e", "versionInfo": "v0.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:displaywidth:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/displaywidth@v0.11.0"}]}, {"name": "github.com/clipperhouse/uax29/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-27c739d965c000cc", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:clipperhouse:uax29\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/clipperhouse/uax29@v2.7.0#v2"}]}, {"name": "github.com/cloudflare/circl", "SPDXID": "SPDXRef-Package-go-module-github.com-cloudflare-circl-a8afd296b5c71fc9", "versionInfo": "v1.6.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cloudflare:circl:v1.6.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cloudflare/circl@v1.6.3"}]}, {"name": "github.com/cncf/xds/go", "SPDXID": "SPDXRef-Package-go-module-github.com-cncf-xds-go-507832fe9cf9235d", "versionInfo": "v0.0.0-20260202195803-dba9d589def2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cncf:xds\\/go:v0.0.0-20260202195803-dba9d589def2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cncf/xds@v0.0.0-20260202195803-dba9d589def2#go"}]}, {"name": "github.com/containerd/containerd/api", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-46a772b5dbcbb6ad", "versionInfo": "v1.12.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:containerd\\/api:v1.12.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/containerd@v1.12.0#api"}]}, {"name": "github.com/containerd/containerd/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-3355b99d86d596f7", "versionInfo": "v2.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:containerd\\/v2:v2.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/containerd@v2.4.1#v2"}]}, {"name": "github.com/containerd/continuity", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-continuity-402bd8d2835340a0", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:continuity:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/continuity@v0.5.0"}]}, {"name": "github.com/containerd/errdefs", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-3144bf1e09c01b5a", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v1.0.0"}]}, {"name": "github.com/containerd/errdefs/pkg", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-71c6ebfd82592d11", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:errdefs\\/pkg:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v0.3.0#pkg"}]}, {"name": "github.com/containerd/fifo", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-fifo-a4677bfa09097113", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:fifo:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/fifo@v1.1.0"}]}, {"name": "github.com/containerd/log", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-log-05f0d4116e8a78f6", "versionInfo": "v0.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:log:v0.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/log@v0.2.0"}]}, {"name": "github.com/containerd/log/otel", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-log-otel-3efc23028ab9fc8a", "versionInfo": "v0.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:log\\/otel:v0.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/log@v0.1.0#otel"}]}, {"name": "github.com/containerd/platforms", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-platforms-e17c82f4353d5a96", "versionInfo": "v1.0.0-rc.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:platforms:v1.0.0-rc.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.5"}]}, {"name": "github.com/containerd/plugin", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-plugin-01cc84b0330888bd", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:plugin:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/plugin@v1.1.0"}]}, {"name": "github.com/containerd/ttrpc", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-9131ee63d3a0a7a3", "versionInfo": "v1.2.9", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:ttrpc:v1.2.9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/ttrpc@v1.2.9"}]}, {"name": "github.com/containerd/typeurl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-d890747a9226cfcb", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:containerd:typeurl\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/containerd/typeurl@v2.3.0#v2"}]}, {"name": "github.com/cyphar/filepath-securejoin", "SPDXID": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-579e5be41bf0f886", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath-securejoin:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:cyphar:filepath_securejoin:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.7.0"}]}, {"name": "github.com/deitch/magic", "SPDXID": "SPDXRef-Package-go-module-github.com-deitch-magic-0ed253fdcdbe55e6", "versionInfo": "v0.0.0-20230404182410-1ff89d7342da", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:deitch:magic:v0.0.0-20230404182410-1ff89d7342da:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/deitch/magic@v0.0.0-20230404182410-1ff89d7342da"}]}, {"name": "github.com/diskfs/go-diskfs", "SPDXID": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-fbeb4437b8e60d6d", "versionInfo": "v1.9.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:diskfs:go-diskfs:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:diskfs:go_diskfs:v1.9.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/diskfs/go-diskfs@v1.9.4"}]}, {"name": "github.com/distribution/reference", "SPDXID": "SPDXRef-Package-go-module-github.com-distribution-reference-44c09a58618be048", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:distribution:reference:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/distribution/reference@v0.6.0"}]}, {"name": "github.com/docker/cli", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-cli-6ca3f2752a3bcc4d", "versionInfo": "v29.8.2+incompatible", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:cli:v29.8.2\\+incompatible:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/cli@v29.8.2%2Bincompatible"}]}, {"name": "github.com/docker/docker-credential-helpers", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-ece53502a88ac269", "versionInfo": "v0.9.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.8"}]}, {"name": "github.com/docker/go-connections", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-connections-e365ba37fdd2386b", "versionInfo": "v0.8.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_connections:v0.8.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-connections@v0.8.1"}]}, {"name": "github.com/docker/go-units", "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-units-8ba49a8f434132a0", "versionInfo": "v0.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/docker/go-units@v0.5.0"}]}, {"name": "github.com/dsnet/compress", "SPDXID": "SPDXRef-Package-go-module-github.com-dsnet-compress-1f89a18953e266ae", "versionInfo": "v0.0.2-0.20230904184137-39efe44ab707", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dsnet:compress:v0.0.2-0.20230904184137-39efe44ab707:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/dsnet/compress@v0.0.2-0.20230904184137-39efe44ab707"}]}, {"name": "github.com/dustin/go-humanize", "SPDXID": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-4e5de139e8e72911", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dustin:go-humanize:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:dustin:go_humanize:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/dustin/go-humanize@v1.1.0"}]}, {"name": "github.com/elliotchance/phpserialize", "SPDXID": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-ff3d0bc7458ec952", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:elliotchance:phpserialize:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/elliotchance/phpserialize@v1.4.0"}]}, {"name": "github.com/emirpasic/gods", "SPDXID": "SPDXRef-Package-go-module-github.com-emirpasic-gods-2524d052564fd07f", "versionInfo": "v1.18.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:emirpasic:gods:v1.18.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/emirpasic/gods@v1.18.1"}]}, {"name": "github.com/envoyproxy/go-control-plane/envoy", "SPDXID": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-e2ca47e293c57aec", "versionInfo": "v1.37.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:go-control-plane\\/envoy:v1.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:go_control_plane\\/envoy:v1.37.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/envoyproxy/go-control-plane@v1.37.0#envoy"}]}, {"name": "github.com/envoyproxy/protoc-gen-validate", "SPDXID": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-d10b9c7456cb026a", "versionInfo": "v1.3.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3"}]}, {"name": "github.com/facebookincubator/nvdtools", "SPDXID": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-242a3b7f04c06bb7", "versionInfo": "v0.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:facebookincubator:nvdtools:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/facebookincubator/nvdtools@v0.1.5"}]}, {"name": "github.com/fatih/color", "SPDXID": "SPDXRef-Package-go-module-github.com-fatih-color-1073229dc453c114", "versionInfo": "v1.19.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fatih:color:v1.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fatih/color@v1.19.0"}]}, {"name": "github.com/felixge/fgprof", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-fgprof-3e142a11a6d4e5c5", "versionInfo": "v0.9.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:fgprof:v0.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/fgprof@v0.9.5"}]}, {"name": "github.com/felixge/httpsnoop", "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-10df3b04834d39a7", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.1.0"}]}, {"name": "github.com/fsnotify/fsnotify", "SPDXID": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-dcd0e334795a252c", "versionInfo": "v1.10.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1"}]}, {"name": "github.com/gabriel-vasile/mimetype", "SPDXID": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-4b5de9a7480d65cb", "versionInfo": "v1.4.15", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gabriel-vasile:mimetype:v1.4.15:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gabriel_vasile:mimetype:v1.4.15:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gabriel:mimetype:v1.4.15:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.15"}]}, {"name": "github.com/github/go-spdx/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-ac74e929b87d7483", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github:go-spdx\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:github:go_spdx\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/github/go-spdx@v2.7.0#v2"}]}, {"name": "github.com/go-git/gcfg", "SPDXID": "SPDXRef-Package-go-module-github.com-go-git-gcfg-dcbf4a0c521d32a7", "versionInfo": "v1.5.1-0.20230307220236-3a3c6141e376", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:gcfg:v1.5.1-0.20230307220236-3a3c6141e376:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376"}]}, {"name": "github.com/go-git/go-billy/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-5fcf7b4b89797cc4", "versionInfo": "v5.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_billy\\/v5:v5.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-git/go-billy@v5.9.1#v5"}]}, {"name": "github.com/go-git/go-git/v5", "SPDXID": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-6f76e11564de6cdd", "versionInfo": "v5.19.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-git:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_git:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_git\\/v5:v5.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-git/go-git@v5.19.2#v5"}]}, {"name": "github.com/go-jose/go-jose/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-7b855ff771abf9e7", "versionInfo": "v4.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go-jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:go_jose\\/v4:v4.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-jose/go-jose@v4.1.5#v4"}]}, {"name": "github.com/go-logr/logr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-6436ff1134843f42", "versionInfo": "v1.4.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:logr:v1.4.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.4"}]}, {"name": "github.com/go-logr/stdr", "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-dfccf7f33fe5f933", "versionInfo": "v1.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2"}]}, {"name": "github.com/go-restruct/restruct", "SPDXID": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-0a0c1854fbd8ef69", "versionInfo": "v1.2.0-alpha", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_restruct:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:restruct:v1.2.0-alpha:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-restruct/restruct@v1.2.0-alpha"}]}, {"name": "github.com/go-viper/mapstructure/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-b7a9487eb7427bad", "versionInfo": "v2.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure@v2.5.0#v2"}]}, {"name": "github.com/goccy/go-yaml", "SPDXID": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-462ff2fc4029993e", "versionInfo": "v1.19.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goccy:go-yaml:v1.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:goccy:go_yaml:v1.19.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/goccy/go-yaml@v1.19.2"}]}, {"name": "github.com/gohugoio/hashstructure", "SPDXID": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-8cbf6fabb392a539", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gohugoio:hashstructure:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gohugoio/hashstructure@v0.6.0"}]}, {"name": "github.com/golang/groupcache", "SPDXID": "SPDXRef-Package-go-module-github.com-golang-groupcache-a29c14f6a16c5970", "versionInfo": "v0.0.0-20241129210726-2c02b8208cf8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:groupcache:v0.0.0-20241129210726-2c02b8208cf8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8"}]}, {"name": "github.com/google/go-cmp", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-cmp-f4611ebae9602958", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-cmp@v0.7.0"}]}, {"name": "github.com/google/go-containerregistry", "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-01504b9605007c0d", "versionInfo": "v0.22.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go-containerregistry:v0.22.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:go_containerregistry:v0.22.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-containerregistry@v0.22.1"}]}, {"name": "github.com/google/licensecheck", "SPDXID": "SPDXRef-Package-go-module-github.com-google-licensecheck-643a36418938422d", "versionInfo": "v0.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:licensecheck:v0.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/licensecheck@v0.3.1"}]}, {"name": "github.com/google/pprof", "SPDXID": "SPDXRef-Package-go-module-github.com-google-pprof-451329184f1d8893", "versionInfo": "v0.0.0-20260802141513-ef3492d7dac3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:pprof:v0.0.0-20260802141513-ef3492d7dac3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/pprof@v0.0.0-20260802141513-ef3492d7dac3"}]}, {"name": "github.com/google/s2a-go", "SPDXID": "SPDXRef-Package-go-module-github.com-google-s2a-go-69d7170b8351c1b8", "versionInfo": "v0.1.9", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a-go:v0.1.9:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:s2a_go:v0.1.9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/s2a-go@v0.1.9"}]}, {"name": "github.com/google/uuid", "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-397da13bafd07e75", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0"}]}, {"name": "github.com/googleapis/enterprise-certificate-proxy", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-548cde168619ea5b", "versionInfo": "v0.3.20", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.20:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.20:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.20"}]}, {"name": "github.com/googleapis/gax-go/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-43018e0c5ff39b59", "versionInfo": "v2.24.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.24.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:googleapis:gax_go\\/v2:v2.24.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/googleapis/gax-go@v2.24.0#v2"}]}, {"name": "github.com/gookit/color", "SPDXID": "SPDXRef-Package-go-module-github.com-gookit-color-6f817d38d6d60ec2", "versionInfo": "v1.6.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gookit:color:v1.6.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gookit/color@v1.6.1"}]}, {"name": "github.com/gpustack/gguf-parser-go", "SPDXID": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-fb6015f7337d56f1", "versionInfo": "v0.26.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gpustack:gguf-parser-go:v0.26.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:gpustack:gguf_parser_go:v0.26.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gpustack/gguf-parser-go@v0.26.3"}]}, {"name": "github.com/hashicorp/aws-sdk-go-base/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-21ba8901b4b3966f", "versionInfo": "v2.0.0-beta.74", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:aws-sdk-go-base\\/v2:v2.0.0-beta.74:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:aws_sdk_go_base\\/v2:v2.0.0-beta.74:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/aws-sdk-go-base@v2.0.0-beta.74#v2"}]}, {"name": "github.com/hashicorp/errwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-05d825cb1564d87f", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0"}]}, {"name": "github.com/hashicorp/go-cleanhttp", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-459163beba492a34", "versionInfo": "v0.5.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2"}]}, {"name": "github.com/hashicorp/go-getter", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-a9927bcecd5484f7", "versionInfo": "v1.8.9", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-getter:v1.8.9:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_getter:v1.8.9:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-getter@v1.8.9"}]}, {"name": "github.com/hashicorp/go-multierror", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-4b6c0ea7d8c019eb", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1"}]}, {"name": "github.com/hashicorp/go-version", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-bcf922b5c10fa8a9", "versionInfo": "v1.9.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go-version:v1.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:go_version:v1.9.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/go-version@v1.9.0"}]}, {"name": "github.com/hashicorp/golang-lru/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-72e2c8140e5a3258", "versionInfo": "v2.0.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:golang-lru\\/v2:v2.0.7:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:golang_lru\\/v2:v2.0.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/golang-lru@v2.0.7#v2"}]}, {"name": "github.com/hashicorp/hcl/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-1a48d07c27d6a710", "versionInfo": "v2.25.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:hashicorp:hcl\\/v2:v2.25.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/hashicorp/hcl@v2.25.0#v2"}]}, {"name": "github.com/henvic/httpretty", "SPDXID": "SPDXRef-Package-go-module-github.com-henvic-httpretty-25073e195b54bdea", "versionInfo": "v0.1.4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:henvic:httpretty:v0.1.4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/henvic/httpretty@v0.1.4"}]}, {"name": "github.com/huandu/xstrings", "SPDXID": "SPDXRef-Package-go-module-github.com-huandu-xstrings-3b28c6c476ef8f12", "versionInfo": "v1.5.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:huandu:xstrings:v1.5.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/huandu/xstrings@v1.5.0"}]}, {"name": "github.com/iancoleman/strcase", "SPDXID": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-f5486be0b1cbf040", "versionInfo": "v0.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:iancoleman:strcase:v0.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/iancoleman/strcase@v0.3.0"}]}, {"name": "github.com/jbenet/go-context", "SPDXID": "SPDXRef-Package-go-module-github.com-jbenet-go-context-1d4b166813afe0eb", "versionInfo": "v0.0.0-20150711004518-d14ea06fba99", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jbenet:go-context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jbenet:go_context:v0.0.0-20150711004518-d14ea06fba99:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99"}]}, {"name": "github.com/jedib0t/go-pretty/v6", "SPDXID": "SPDXRef-Package-go-module-github.com-jedib0t-go-pretty-v6-39f0ac4d73e349cf", "versionInfo": "v6.8.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jedib0t:go-pretty\\/v6:v6.8.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jedib0t:go_pretty\\/v6:v6.8.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jedib0t/go-pretty@v6.8.3#v6"}]}, {"name": "github.com/jinzhu/copier", "SPDXID": "SPDXRef-Package-go-module-github.com-jinzhu-copier-9a69f2b0a23c49be", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:jinzhu:copier:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jinzhu/copier@v0.4.0"}]}, {"name": "github.com/json-iterator/go", "SPDXID": "SPDXRef-Package-go-module-github.com-json-iterator-go-a82ba5b47fae6476", "versionInfo": "v1.1.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json_iterator:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:json:go:v1.1.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/json-iterator/go@v1.1.12"}]}, {"name": "github.com/kastenhq/goversion", "SPDXID": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-cce5d752cfcdf7b6", "versionInfo": "v0.0.0-20230811215019-93b2f8823953", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kastenhq:goversion:v0.0.0-20230811215019-93b2f8823953:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kastenhq/goversion@v0.0.0-20230811215019-93b2f8823953"}]}, {"name": "github.com/kevinburke/ssh_config", "SPDXID": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-70d5241abf2ce5ce", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kevinburke:ssh-config:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:kevinburke:ssh_config:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kevinburke/ssh_config@v1.2.0"}]}, {"name": "github.com/klauspost/compress", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-compress-18562502915cfea5", "versionInfo": "v1.20.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:compress:v1.20.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/compress@v1.20.1"}]}, {"name": "github.com/klauspost/cpuid/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-cpuid-v2-1459ff9e76727183", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:cpuid\\/v2:v2.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/cpuid@v2.3.0#v2"}]}, {"name": "github.com/klauspost/pgzip", "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-93a3d42abd9a2815", "versionInfo": "v1.2.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:klauspost:pgzip:v1.2.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/klauspost/pgzip@v1.2.6"}]}, {"name": "github.com/lucasb-eyer/go-colorful", "SPDXID": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-10b0bdfb6a46bdff", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb-eyer:go-colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb-eyer:go_colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb_eyer:go-colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb_eyer:go_colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb:go-colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:lucasb:go_colorful:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/lucasb-eyer/go-colorful@v1.3.0"}]}, {"name": "github.com/mattn/go-colorable", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-17568b4f72a6f18e", "versionInfo": "v0.1.14", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-colorable:v0.1.14:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_colorable:v0.1.14:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-colorable@v0.1.14"}]}, {"name": "github.com/mattn/go-isatty", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-04697fbcb672e0f6", "versionInfo": "v0.0.24", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-isatty:v0.0.24:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_isatty:v0.0.24:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-isatty@v0.0.24"}]}, {"name": "github.com/mattn/go-runewidth", "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-217d87b2b0362cbc", "versionInfo": "v0.0.27", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go-runewidth:v0.0.27:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mattn:go_runewidth:v0.0.27:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mattn/go-runewidth@v0.0.27"}]}, {"name": "github.com/mgutz/ansi", "SPDXID": "SPDXRef-Package-go-module-github.com-mgutz-ansi-254e4bb1d54c9538", "versionInfo": "v0.0.0-20200706080929-d51e80ef957d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mgutz:ansi:v0.0.0-20200706080929-d51e80ef957d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20200706080929-d51e80ef957d"}]}, {"name": "github.com/mholt/archives", "SPDXID": "SPDXRef-Package-go-module-github.com-mholt-archives-e692ca1f36967d51", "versionInfo": "v0.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mholt:archives:v0.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mholt/archives@v0.1.5"}]}, {"name": "github.com/mikelolasagasti/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-5a76bb349329c2d6", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mikelolasagasti:xz:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mikelolasagasti/xz@v1.0.1"}]}, {"name": "github.com/minio/minlz", "SPDXID": "SPDXRef-Package-go-module-github.com-minio-minlz-02e665cefe319c69", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:minio:minlz:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/minio/minlz@v1.0.1"}]}, {"name": "github.com/mitchellh/copystructure", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-5ff64590d7d59405", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:copystructure:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/copystructure@v1.2.0"}]}, {"name": "github.com/mitchellh/go-homedir", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-4f153f279a8b1825", "versionInfo": "v1.1.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go-homedir:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go_homedir:v1.1.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0"}]}, {"name": "github.com/mitchellh/go-wordwrap", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-be25bb4e99e7b50d", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go-wordwrap:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:go_wordwrap:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1"}]}, {"name": "github.com/mitchellh/reflectwalk", "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-ea06e26d31488b3d", "versionInfo": "v1.0.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:mitchellh:reflectwalk:v1.0.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mitchellh/reflectwalk@v1.0.2"}]}, {"name": "github.com/moby/docker-image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-0a7444dafcf4ea2a", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker-image-spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:docker_image_spec:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1"}]}, {"name": "github.com/moby/locker", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-locker-de881aa2ab410278", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:locker:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/locker@v1.0.1"}]}, {"name": "github.com/moby/moby/api", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-api-50455f15c0e51bee", "versionInfo": "v1.56.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/api:v1.56.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v1.56.0#api"}]}, {"name": "github.com/moby/moby/client", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-client-8b979a083851fc82", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:moby\\/client:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/moby@v0.6.0#client"}]}, {"name": "github.com/moby/sys/mountinfo", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-76da82670a2d8bb3", "versionInfo": "v0.7.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/mountinfo:v0.7.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.2#mountinfo"}]}, {"name": "github.com/moby/sys/signal", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-signal-173b0cabf60477d1", "versionInfo": "v0.7.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/signal:v0.7.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.7.1#signal"}]}, {"name": "github.com/moby/sys/user", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-user-ba27c15a5e3c69c5", "versionInfo": "v0.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/user:v0.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.4.1#user"}]}, {"name": "github.com/moby/sys/userns", "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-userns-e9bd016bc652c44b", "versionInfo": "v0.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:moby:sys\\/userns:v0.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/moby/sys@v0.2.1#userns"}]}, {"name": "github.com/modern-go/concurrent", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-c1da4bd7ca639a6b", "versionInfo": "v0.0.0-20180306012644-bacd9c7ef1dd", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd"}]}, {"name": "github.com/modern-go/reflect2", "SPDXID": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-7e0b04cbf57ce75e", "versionInfo": "v1.0.3-0.20250322232337-35a7c28c31ee", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern-go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern_go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:modern:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee"}]}, {"name": "github.com/muesli/ansi", "SPDXID": "SPDXRef-Package-go-module-github.com-muesli-ansi-478eff96e2b7d5fd", "versionInfo": "v0.0.0-20230316100256-276c6243b2f6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:muesli:ansi:v0.0.0-20230316100256-276c6243b2f6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/muesli/ansi@v0.0.0-20230316100256-276c6243b2f6"}]}, {"name": "github.com/muesli/cancelreader", "SPDXID": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-1696efa3be9ddacb", "versionInfo": "v0.2.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:muesli:cancelreader:v0.2.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/muesli/cancelreader@v0.2.2"}]}, {"name": "github.com/muesli/termenv", "SPDXID": "SPDXRef-Package-go-module-github.com-muesli-termenv-497e9b4f9d0b2fd7", "versionInfo": "v0.16.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:muesli:termenv:v0.16.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/muesli/termenv@v0.16.0"}]}, {"name": "github.com/nix-community/go-nix", "SPDXID": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-a100f9a622389c9d", "versionInfo": "v0.0.0-20250101154619-4bdde671e0a1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix-community:go-nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix-community:go_nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix_community:go-nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix_community:go_nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix:go-nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nix:go_nix:v0.0.0-20250101154619-4bdde671e0a1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/nix-community/go-nix@v0.0.0-20250101154619-4bdde671e0a1"}]}, {"name": "github.com/nwaples/rardecode/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-edd1533055ef401a", "versionInfo": "v2.4.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:nwaples:rardecode\\/v2:v2.4.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/nwaples/rardecode@v2.4.1#v2"}]}, {"name": "github.com/olekukonko/cat", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-cat-53121fc9b09e8fbc", "versionInfo": "v0.0.0-20250911104152-50322a0618f6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:cat:v0.0.0-20250911104152-50322a0618f6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/cat@v0.0.0-20250911104152-50322a0618f6"}]}, {"name": "github.com/olekukonko/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-errors-f16620d13ea59692", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:errors:v1.2.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/errors@v1.2.0"}]}, {"name": "github.com/olekukonko/ll", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-ll-4038cc579593a5f3", "versionInfo": "v0.1.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:ll:v0.1.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/ll@v0.1.6"}]}, {"name": "github.com/olekukonko/tablewriter", "SPDXID": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-bbab9cea6f92c435", "versionInfo": "v1.1.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:olekukonko:tablewriter:v1.1.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/olekukonko/tablewriter@v1.1.5"}]}, {"name": "github.com/opencontainers/go-digest", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-7d70b1f1ebdaa59c", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0"}]}, {"name": "github.com/opencontainers/image-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-47864060859df34b", "versionInfo": "v1.1.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1"}]}, {"name": "github.com/opencontainers/runtime-spec", "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-6c79abe7f569f58b", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime-spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:opencontainers:runtime_spec:v1.3.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/opencontainers/runtime-spec@v1.3.0"}]}, {"name": "github.com/pborman/indent", "SPDXID": "SPDXRef-Package-go-module-github.com-pborman-indent-433bffc2ad7d4631", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pborman:indent:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pborman/indent@v1.2.1"}]}, {"name": "github.com/pelletier/go-toml", "SPDXID": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-48c7e8bf3b3cbf4f", "versionInfo": "v1.9.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go-toml:v1.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go_toml:v1.9.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pelletier/go-toml@v1.9.5"}]}, {"name": "github.com/pelletier/go-toml/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-31d983bf20213b71", "versionInfo": "v2.4.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go-toml\\/v2:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pelletier:go_toml\\/v2:v2.4.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pelletier/go-toml@v2.4.3#v2"}]}, {"name": "github.com/pierrec/lz4/v4", "SPDXID": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-1006e6a36d0a2e87", "versionInfo": "v4.1.26", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pierrec:lz4\\/v4:v4.1.26:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pierrec/lz4@v4.1.26#v4"}]}, {"name": "github.com/piprate/json-gold", "SPDXID": "SPDXRef-Package-go-module-github.com-piprate-json-gold-6046eb11c0667eda", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:piprate:json-gold:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:piprate:json_gold:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/piprate/json-gold@v0.7.0"}]}, {"name": "github.com/pjbgf/sha1cd", "SPDXID": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-97e7386dcec7af45", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pjbgf:sha1cd:v0.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pjbgf/sha1cd@v0.6.0"}]}, {"name": "github.com/pkg/errors", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-errors-2ed853c3a86d31ac", "versionInfo": "v0.9.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1"}]}, {"name": "github.com/pkg/profile", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-profile-95f18f76f5c6d6e8", "versionInfo": "v1.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:profile:v1.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/profile@v1.7.0"}]}, {"name": "github.com/pkg/xattr", "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-xattr-87381442408ea2a2", "versionInfo": "v0.4.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pkg:xattr:v0.4.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pkg/xattr@v0.4.12"}]}, {"name": "github.com/pquerna/cachecontrol", "SPDXID": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-6344be082ee6701a", "versionInfo": "v0.0.0-20180517163645-1555304b9b35", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:pquerna:cachecontrol:v0.0.0-20180517163645-1555304b9b35:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pquerna/cachecontrol@v0.0.0-20180517163645-1555304b9b35"}]}, {"name": "github.com/remyoudompheng/bigfft", "SPDXID": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-301ae056ce08d382", "versionInfo": "v0.0.0-20230129092748-24d4a6f8daec", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:remyoudompheng:bigfft:v0.0.0-20230129092748-24d4a6f8daec:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec"}]}, {"name": "github.com/rivo/uniseg", "SPDXID": "SPDXRef-Package-go-module-github.com-rivo-uniseg-6e8dba1cf6eaeb3e", "versionInfo": "v0.4.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rivo:uniseg:v0.4.7:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/rivo/uniseg@v0.4.7"}]}, {"name": "github.com/rust-secure-code/go-rustaudit", "SPDXID": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-dd5ced448b2aed9f", "versionInfo": "v0.0.0-20250226111315-e20ec32e963c", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure-code:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure-code:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure_code:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure_code:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust-secure:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust_secure:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust:go-rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:rust:go_rustaudit:v0.0.0-20250226111315-e20ec32e963c:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/rust-secure-code/go-rustaudit@v0.0.0-20250226111315-e20ec32e963c"}]}, {"name": "github.com/sagikazarmark/locafero", "SPDXID": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-9d44b87e3cb113bb", "versionInfo": "v0.11.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sagikazarmark:locafero:v0.11.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0"}]}, {"name": "github.com/saintfish/chardet", "SPDXID": "SPDXRef-Package-go-module-github.com-saintfish-chardet-7c402b7932dbaa9e", "versionInfo": "v0.0.0-20230101081208-5e3ef4b5456d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:saintfish:chardet:v0.0.0-20230101081208-5e3ef4b5456d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/saintfish/chardet@v0.0.0-20230101081208-5e3ef4b5456d"}]}, {"name": "github.com/sassoftware/go-rpmutils", "SPDXID": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-b5cece3a35e04986", "versionInfo": "v0.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sassoftware:go-rpmutils:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sassoftware:go_rpmutils:v0.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sassoftware/go-rpmutils@v0.4.0"}]}, {"name": "github.com/scylladb/go-set", "SPDXID": "SPDXRef-Package-go-module-github.com-scylladb-go-set-6b4abf4f88284621", "versionInfo": "v1.0.3-0.20200225121959-cc7b2070d91e", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:scylladb:go-set:v1.0.3-0.20200225121959-cc7b2070d91e:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:scylladb:go_set:v1.0.3-0.20200225121959-cc7b2070d91e:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/scylladb/go-set@v1.0.3-0.20200225121959-cc7b2070d91e"}]}, {"name": "github.com/sergi/go-diff", "SPDXID": "SPDXRef-Package-go-module-github.com-sergi-go-diff-02d239568296c21f", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sergi:go-diff:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sergi:go_diff:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sergi/go-diff@v1.4.0"}]}, {"name": "github.com/shopspring/decimal", "SPDXID": "SPDXRef-Package-go-module-github.com-shopspring-decimal-aa8a6f9ee8a9de3f", "versionInfo": "v1.4.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:shopspring:decimal:v1.4.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/shopspring/decimal@v1.4.0"}]}, {"name": "github.com/sirupsen/logrus", "SPDXID": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-df2d3e8033c38b11", "versionInfo": "v1.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sirupsen:logrus:v1.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sirupsen/logrus@v1.10.2"}]}, {"name": "github.com/skeema/knownhosts", "SPDXID": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-f7702f4f28cd48bb", "versionInfo": "v1.3.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:skeema:knownhosts:v1.3.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/skeema/knownhosts@v1.3.1"}]}, {"name": "github.com/smallnest/ringbuffer", "SPDXID": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-c015aff6d49b18b2", "versionInfo": "v0.0.0-20241116012123-461381446e3d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:smallnest:ringbuffer:v0.0.0-20241116012123-461381446e3d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/smallnest/ringbuffer@v0.0.0-20241116012123-461381446e3d"}]}, {"name": "github.com/sorairolake/lzip-go", "SPDXID": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-968e13a87e8fb0a9", "versionInfo": "v0.3.8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sorairolake:lzip-go:v0.3.8:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sorairolake:lzip_go:v0.3.8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sorairolake/lzip-go@v0.3.8"}]}, {"name": "github.com/sourcegraph/conc", "SPDXID": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-47b0e4bc09b2ddf1", "versionInfo": "v0.3.1-0.20240121214520-5f936abd7ae8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sourcegraph:conc:v0.3.1-0.20240121214520-5f936abd7ae8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8"}]}, {"name": "github.com/spdx/gordf", "SPDXID": "SPDXRef-Package-go-module-github.com-spdx-gordf-bdae28ed42404f52", "versionInfo": "v0.0.0-20201111095634-7098f93598fb", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spdx:gordf:v0.0.0-20201111095634-7098f93598fb:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spdx/gordf@v0.0.0-20201111095634-7098f93598fb"}]}, {"name": "github.com/spdx/tools-golang", "SPDXID": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-9fc7c2fb18fdc306", "versionInfo": "v0.6.0-rc4", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spdx:tools-golang:v0.6.0-rc4:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spdx:tools_golang:v0.6.0-rc4:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spdx/tools-golang@v0.6.0-rc4"}]}, {"name": "github.com/spf13/afero", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-afero-4b78b32084b371cc", "versionInfo": "v1.15.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:afero:v1.15.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/afero@v1.15.0"}]}, {"name": "github.com/spf13/cast", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cast-2b19f6785a1e6670", "versionInfo": "v1.10.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cast:v1.10.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cast@v1.10.0"}]}, {"name": "github.com/spf13/cobra", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cobra-ae7536512e273190", "versionInfo": "v1.10.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2"}]}, {"name": "github.com/spf13/pflag", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-da797b128aad4389", "versionInfo": "v1.0.10", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10"}]}, {"name": "github.com/spf13/viper", "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-viper-913a415ef2ddb00f", "versionInfo": "v1.21.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spf13:viper:v1.21.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/viper@v1.21.0"}]}, {"name": "github.com/spiffe/go-spiffe/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-db3b5f7f16cd9206", "versionInfo": "v2.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spiffe:go-spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:spiffe:go_spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spiffe/go-spiffe@v2.7.0#v2"}]}, {"name": "github.com/subosito/gotenv", "SPDXID": "SPDXRef-Package-go-module-github.com-subosito-gotenv-bdebd6dfca4ce5d8", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:subosito:gotenv:v1.6.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/subosito/gotenv@v1.6.0"}]}, {"name": "github.com/sylabs/sif/v2", "SPDXID": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-e07aa40c10bde55d", "versionInfo": "v2.24.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sylabs:sif\\/v2:v2.24.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sylabs/sif@v2.24.2#v2"}]}, {"name": "github.com/sylabs/squashfs", "SPDXID": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-6f9519a7266f461e", "versionInfo": "v1.0.6", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:sylabs:squashfs:v1.0.6:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sylabs/squashfs@v1.0.6"}]}, {"name": "github.com/tailscale/hujson", "SPDXID": "SPDXRef-Package-go-module-github.com-tailscale-hujson-65ccbf0d0a224519", "versionInfo": "v0.0.0-20260302212456-ecc657c15afd", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:tailscale:hujson:v0.0.0-20260302212456-ecc657c15afd:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/tailscale/hujson@v0.0.0-20260302212456-ecc657c15afd"}]}, {"name": "github.com/therootcompany/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-therootcompany-xz-58801f63accf687b", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:therootcompany:xz:v1.0.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/therootcompany/xz@v1.0.1"}]}, {"name": "github.com/ulikunitz/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-089b7118d909bf41", "versionInfo": "v0.5.17", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:ulikunitz:xz:v0.5.17:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/ulikunitz/xz@v0.5.17"}]}, {"name": "github.com/vbatts/go-mtree", "SPDXID": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-ca7d31d4a5e98536", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:go-mtree:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vbatts:go_mtree:v0.7.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vbatts/go-mtree@v0.7.0"}]}, {"name": "github.com/vifraa/gopom", "SPDXID": "SPDXRef-Package-go-module-github.com-vifraa-gopom-18471579177bf3b6", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:vifraa:gopom:v1.0.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/vifraa/gopom@v1.0.0"}]}, {"name": "github.com/wagoodman/go-partybus", "SPDXID": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-248bc2b7ae08132c", "versionInfo": "v0.0.0-20230516145632-8ccac152c651", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go-partybus:v0.0.0-20230516145632-8ccac152c651:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go_partybus:v0.0.0-20230516145632-8ccac152c651:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/wagoodman/go-partybus@v0.0.0-20230516145632-8ccac152c651"}]}, {"name": "github.com/wagoodman/go-progress", "SPDXID": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-f03f64251c78236c", "versionInfo": "v0.0.0-20260303201901-10176f79b2c0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go-progress:v0.0.0-20260303201901-10176f79b2c0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:wagoodman:go_progress:v0.0.0-20260303201901-10176f79b2c0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/wagoodman/go-progress@v0.0.0-20260303201901-10176f79b2c0"}]}, {"name": "github.com/xanzy/ssh-agent", "SPDXID": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-4da06510810a7715", "versionInfo": "v0.3.3", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xanzy:ssh-agent:v0.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xanzy:ssh_agent:v0.3.3:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3"}]}, {"name": "github.com/xi2/xz", "SPDXID": "SPDXRef-Package-go-module-github.com-xi2-xz-126d0ec70762d3cf", "versionInfo": "v0.0.0-20171230120015-48954b6210f8", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xi2:xz:v0.0.0-20171230120015-48954b6210f8:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/xi2/xz@v0.0.0-20171230120015-48954b6210f8"}]}, {"name": "github.com/xo/terminfo", "SPDXID": "SPDXRef-Package-go-module-github.com-xo-terminfo-2c02a34295d081a5", "versionInfo": "v0.0.0-20220910002029-abceb7e1c41e", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:xo:terminfo:v0.0.0-20220910002029-abceb7e1c41e:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/xo/terminfo@v0.0.0-20220910002029-abceb7e1c41e"}]}, {"name": "github.com/zclconf/go-cty", "SPDXID": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-98b5bcbfadf3d3d6", "versionInfo": "v1.19.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go-cty:v1.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zclconf:go_cty:v1.19.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/zclconf/go-cty@v1.19.0"}]}, {"name": "github.com/zyedidia/generic", "SPDXID": "SPDXRef-Package-go-module-github.com-zyedidia-generic-780a609c23a1c059", "versionInfo": "v1.2.2-0.20230320175451-4410d2372cb1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:zyedidia:generic:v1.2.2-0.20230320175451-4410d2372cb1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/zyedidia/generic@v1.2.2-0.20230320175451-4410d2372cb1"}]}, {"name": "go.opentelemetry.io/auto/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-f0ef1d76bc7a05d1", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1"}]}, {"name": "go.opentelemetry.io/contrib/detectors/gcp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-8f3cc5baa695dfa5", "versionInfo": "v1.44.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:detectors\\/gcp:v1.44.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/detectors@v1.44.0#gcp"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-292f6fd0a2dd7c1c", "versionInfo": "v0.71.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/google.golang.org\\/grpc\\/otelgrpc:v0.71.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.71.0#google.golang.org/grpc/otelgrpc"}]}, {"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-c6f95e8730302d36", "versionInfo": "v0.71.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.71.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation@v0.71.0#net/http/otelhttp"}]}, {"name": "go.opentelemetry.io/otel", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-0efe88a152ae4c37", "versionInfo": "v1.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.46.0"}]}, {"name": "go.opentelemetry.io/otel/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-02c18ccc2d4e6110", "versionInfo": "v1.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:metric:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.46.0"}]}, {"name": "go.opentelemetry.io/otel/sdk", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-167a37384a0bbe0f", "versionInfo": "v1.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:sdk:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.46.0"}]}, {"name": "go.opentelemetry.io/otel/sdk/metric", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-40bbfbd8d70e1afd", "versionInfo": "v1.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:sdk\\/metric:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.46.0#metric"}]}, {"name": "go.opentelemetry.io/otel/trace", "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-500dc31e5af20719", "versionInfo": "v1.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:otel:trace:v1.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.46.0"}]}, {"name": "go.yaml.in/yaml/v3", "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-a57c1b1c226cecb7", "versionInfo": "v3.0.5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:yaml:v3:v3.0.5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5"}]}, {"name": "go4.org", "SPDXID": "SPDXRef-Package-go-module-go4.org-dbdea48ad491062e", "versionInfo": "v0.0.0-20230225012048-214862532bf5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go4.org@v0.0.0-20230225012048-214862532bf5"}]}, {"name": "golang.org/x/crypto", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-ecada2b0c85223da", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:go:ssh:v0.57.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.57.0"}]}, {"name": "golang.org/x/exp", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-exp-b756c7ab8d43ba05", "versionInfo": "v0.0.0-20260410095643-746e56fc9e2f", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/exp:v0.0.0-20260410095643-746e56fc9e2f:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/exp@v0.0.0-20260410095643-746e56fc9e2f"}]}, {"name": "golang.org/x/mod", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-mod-c9fa74c81426e0a5", "versionInfo": "v0.41.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/mod:v0.41.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/mod@v0.41.0"}]}, {"name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-1c98f42efe4d2d32", "versionInfo": "v0.59.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:networking:v0.59.0:*:*:*:*:go:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.59.0"}]}, {"name": "golang.org/x/oauth2", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-oauth2-20882062b8a5cf3f", "versionInfo": "v0.36.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/oauth2:v0.36.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/oauth2@v0.36.0"}]}, {"name": "golang.org/x/sync", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-8bd633b0527f8025", "versionInfo": "v0.23.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.23.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sync@v0.23.0"}]}, {"name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-2c86da48836f7264", "versionInfo": "v0.48.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.48.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.48.0"}]}, {"name": "golang.org/x/term", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-term-d31487e74dcda11a", "versionInfo": "v0.46.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/term:v0.46.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/term@v0.46.0"}]}, {"name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-82cc85e804087bb3", "versionInfo": "v0.42.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:text:v0.42.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.42.0"}]}, {"name": "golang.org/x/time", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-time-a037f73a10b02379", "versionInfo": "v0.16.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/time:v0.16.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/time@v0.16.0"}]}, {"name": "golang.org/x/tools", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-tools-0175d87f427ffc94", "versionInfo": "v0.50.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/tools:v0.50.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/tools@v0.50.0"}]}, {"name": "golang.org/x/xerrors", "SPDXID": "SPDXRef-Package-go-module-golang.org-x-xerrors-438e1125f073951e", "versionInfo": "v0.0.0-20231012003039-104605ab7028", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:x\\/xerrors:v0.0.0-20231012003039-104605ab7028:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/xerrors@v0.0.0-20231012003039-104605ab7028"}]}, {"name": "google.golang.org/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-api-83ca9e3af34ea9f3", "versionInfo": "v0.294.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:api:v0.294.0:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/api@v0.294.0"}]}, {"name": "google.golang.org/genproto", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-ea8221d6a42ad600", "versionInfo": "v0.0.0-20260715232425-e75dac1f907d", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260715232425-e75dac1f907d:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto@v0.0.0-20260715232425-e75dac1f907d"}]}, {"name": "google.golang.org/genproto/googleapis/api", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-c62c7f83e71eb3de", "versionInfo": "v0.0.0-20260825221802-da73d73af1c5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260825221802-da73d73af1c5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260825221802-da73d73af1c5#api"}]}, {"name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-6bea1b7b96581b39", "versionInfo": "v0.0.0-20260825221802-da73d73af1c5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260825221802-da73d73af1c5:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis@v0.0.0-20260825221802-da73d73af1c5#rpc"}]}, {"name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-92772dc5b003d856", "versionInfo": "v1.83.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:grpc:v1.83.2:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.83.2"}]}, {"name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-3ff2f47107982428", "versionInfo": "v1.36.12", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.12:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.12"}]}, {"name": "gopkg.in/warnings.v0", "SPDXID": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-0ca92b216f1f6b78", "versionInfo": "v0.1.2", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/warnings.v0@v0.1.2"}]}, {"name": "howett.net/plist", "SPDXID": "SPDXRef-Package-go-module-howett.net-plist-248e733ec35b61ae", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/howett.net/plist@v1.0.1"}]}, {"name": "modernc.org/libc", "SPDXID": "SPDXRef-Package-go-module-modernc.org-libc-2b47d25b20c221af", "versionInfo": "v1.75.7", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/libc@v1.75.7"}]}, {"name": "modernc.org/mathutil", "SPDXID": "SPDXRef-Package-go-module-modernc.org-mathutil-c69b0be31f5a67ea", "versionInfo": "v1.7.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/mathutil@v1.7.1"}]}, {"name": "modernc.org/memory", "SPDXID": "SPDXRef-Package-go-module-modernc.org-memory-37ea00b64a730e48", "versionInfo": "v1.12.1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/memory@v1.12.1"}]}, {"name": "modernc.org/sqlite", "SPDXID": "SPDXRef-Package-go-module-modernc.org-sqlite-7a9c927d41a8c117", "versionInfo": "v1.59.0", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/modernc.org/sqlite@v1.59.0"}]}, {"name": "stdlib", "SPDXID": "SPDXRef-Package-go-module-stdlib-fc90a38b069ba9d9", "versionInfo": "go1.27.2-X:nodwarf5", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from go module information: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "BSD-3-Clause", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:golang:go:1.27.2:-:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/stdlib@1.27.2-X%3Anodwarf5"}]}, {"name": "syft", "SPDXID": "SPDXRef-Package-rpm-syft-b4849e9e703de1da", "versionInfo": "1.54.1-0.2.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/bin/syft", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:syft:syft:1.54.1-0.2.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/syft@1.54.1-0.2.hum1?distro=hummingbird-1"}]}, {"name": "rpm-extracted/syft-1.54.1-0.2.hum1.x86_64", "SPDXID": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "syft", "SPDXID": "SPDXRef-Package-rpm-syft-7eba458fb166acb7", "versionInfo": "1.54.1-0.2.hum1", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "sourceInfo": "acquired package info from RPM DB: /usr/lib/debug/usr/bin/syft-1.54.1-0.2.hum1.x86_64.debug", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "externalRefs": [{"referenceCategory": "SECURITY", "referenceType": "cpe23Type", "referenceLocator": "cpe:2.3:a:syft:syft:1.54.1-0.2.hum1:*:*:*:*:*:*:*"}, {"referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:rpm/hummingbird/syft@1.54.1-0.2.hum1?distro=hummingbird-1"}]}, {"name": "rpm-extracted/syft-debuginfo-1.54.1-0.2.hum1.x86_64", "SPDXID": "SPDXRef-Directory-Root-syft-debuginfo-1.54.1-0.2.hum1.x86-64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}, {"name": "rpm-extracted/syft-debugsource-1.54.1-0.2.hum1.x86_64", "SPDXID": "SPDXRef-Directory-Root-syft-debugsource-1.54.1-0.2.hum1.x86-64", "supplier": "NOASSERTION", "downloadLocation": "NOASSERTION", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "copyrightText": "NOASSERTION", "primaryPackagePurpose": "FILE"}], "files": [{"fileName": "usr/bin/syft", "SPDXID": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "c704476219f198fc092cca1492ae587ae4e2dbfa"}, {"algorithm": "SHA256", "checksumValue": "982bd3f7c7a737d95ef51b4b2fd1fd687e4afc1e28933502d70773a40d0915c0"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/lib/debug/usr/bin/syft-1.54.1-0.2.hum1.aarch64.debug", "SPDXID": "SPDXRef-File-...bin-syft-1.54.1-0.2.hum1.aarch64.debug-5cbd6efd485f62cf", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "bb79970cc26274da4e4acde941c743c68cb08d4a"}, {"algorithm": "SHA256", "checksumValue": "d0311b225b3896ddc6025192710fd962d21a5eb2881705a655b8ef82c71eb469"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/bin/syft", "SPDXID": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "74949c99910cbcdc995c2cfea805b84709fd06a0"}, {"algorithm": "SHA256", "checksumValue": "5cf053a3eafc8426ff57df098e04ed917f86dadeceab6e8ca9c518e4f025844d"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/lib/debug/usr/bin/syft-1.54.1-0.2.hum1.s390x.debug", "SPDXID": "SPDXRef-File-...bin-syft-1.54.1-0.2.hum1.s390x.debug-a80254f4d406ad5e", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "54cc3d72283d4e5c0c0bda5ab718698b41001143"}, {"algorithm": "SHA256", "checksumValue": "d6131a3b9ead6ca2b0782b5565c55aa3c429bb6db6d42997cec2331188bbb5d8"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/bin/syft", "SPDXID": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "f9606b1ec0a94fb7f37b46a7b3f3c4594c8b54ad"}, {"algorithm": "SHA256", "checksumValue": "49599564421799cc9a5abf7e5e0244365ef2b3c76ff0201812b5fbc1f409e2fc"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}, {"fileName": "usr/lib/debug/usr/bin/syft-1.54.1-0.2.hum1.x86_64.debug", "SPDXID": "SPDXRef-File-...bin-syft-1.54.1-0.2.hum1.x86-64.debug-dc400c1086c82289", "fileTypes": ["APPLICATION", "BINARY"], "checksums": [{"algorithm": "SHA1", "checksumValue": "68d8aadbf5151245cb52476d50c7ede2a294212c"}, {"algorithm": "SHA256", "checksumValue": "fd68ed490664f201c181cb755afad4ce94371c449e69e2fc67359a39ef1ef26b"}], "licenseConcluded": "NOASSERTION", "licenseInfoInFiles": ["NOASSERTION"], "copyrightText": "NOASSERTION"}], "relationships": [{"spdxElementId": "SPDXRef-DOCUMENT", "relationshipType": "DESCRIBES", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-aarch64-syft", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-s390x-syft", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-x86-64-syft", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-aarch64-syft-debuginfo", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-s390x-syft-debuginfo", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-x86-64-syft-debuginfo", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-aarch64-syft-debugsource", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-s390x-syft-debugsource", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-x86-64-syft-debugsource", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-SRPM"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source0"}, {"spdxElementId": "SPDXRef-Source0", "relationshipType": "GENERATED_FROM", "relatedSpdxElement": "SPDXRef-Source0-origin"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source1"}, {"spdxElementId": "SPDXRef-SRPM", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Source2"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-R-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-add-determinism-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-alternatives-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-docs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ansible-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-askalono-cli-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-audit-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bash-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-binutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ca-certificates-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cmake-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-common-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpio-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpp-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-config-default-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-curl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-debugedit-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-diffutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-dwz-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ed-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-efi-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libelf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-erlang-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-expat-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-findutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fonts-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-forge-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fpc-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gap-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gawk-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdb-minimal-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdbm-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ghc-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-common-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-gconv-extra-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gmp-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnat-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnome-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnulib-l10n-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-verify-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnutls-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-filesystem-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-rpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-vendor-tools-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-bin-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-src-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golist-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgverify-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-grep-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gzip-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-release-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-repos-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-info-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jansson-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-json-c-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-headers-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-keyutils-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-krb5-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libacl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libarchive-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libasan-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libassuan-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libatomic-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libattr-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libblkid-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbrotli-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-ng-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcbor-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcom-err-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcurl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libeconf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libevent-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfdisk-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libffi-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfido2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfsverity-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcrypt-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgomp-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgpg-error-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libidn2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libksba-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-liblastlog2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmount-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmpc-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp3-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpfm-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpkgconf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpsl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-utils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsemanage-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsepol-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsmartcols-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-config-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libstdc++-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtasn1-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtool-ltdl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libubsan-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libunistring-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libusb1-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libuuid-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libverto-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-devel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxml2-16-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libzstd-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-linkdupes-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lz4-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-make-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-meson-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpdecimal-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpfr-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-base-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nettle-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-npth-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openblas-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openldap-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-trust-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-patch-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-syntax-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-perl-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-m4-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-policycoreutils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-popt-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-pip-wheel-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-boolean.py-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-license-expression-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt5-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt6-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-readline-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-redhat-rpm-config-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sequoia-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sign-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rust-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sed-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-targeted-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-setup-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tar-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tpm2-tss-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tzdata-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-unzip-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-core-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-which-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xxhash-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-libs-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zig-srpm-macros-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zip-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zlib-ng-compat-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zstd-aarch64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-aarch64-syft"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-aarch64-syft-debuginfo"}, {"spdxElementId": "SPDXRef-Buildroot-syft-aarch64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-aarch64-syft-debugsource"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-R-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-add-determinism-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-alternatives-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-docs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ansible-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-askalono-cli-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-audit-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bash-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-binutils-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ca-certificates-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cmake-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-common-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpio-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpp-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-config-default-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-curl-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-debugedit-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-diffutils-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-dwz-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ed-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-efi-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libelf-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-erlang-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-expat-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-findutils-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fonts-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-forge-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fpc-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gap-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gawk-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdb-minimal-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdbm-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ghc-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-common-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-devel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-gconv-extra-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gmp-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnat-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnome-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnulib-l10n-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-verify-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnutls-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-filesystem-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-rpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-vendor-tools-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-bin-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-src-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golist-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgverify-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-grep-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gzip-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-release-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-repos-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-info-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jansson-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-json-c-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-headers-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-keyutils-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-krb5-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libacl-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libarchive-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libasan-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libassuan-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libatomic-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libattr-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libblkid-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbrotli-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-ng-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcbor-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcom-err-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcurl-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libeconf-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libevent-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfdisk-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libffi-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfido2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfsverity-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcc-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcrypt-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgomp-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgpg-error-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libidn2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libksba-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-liblastlog2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmount-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmpc-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp3-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpkgconf-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpsl-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-utils-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsemanage-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsepol-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsmartcols-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-config-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libstdc++-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtasn1-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtool-ltdl-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libubsan-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libunistring-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libusb1-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libuuid-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libverto-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-devel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxml2-16-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libzstd-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-linkdupes-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lz4-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-make-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-meson-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpdecimal-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpfr-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-base-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nettle-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-npth-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openblas-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openldap-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-trust-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-patch-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-syntax-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-perl-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-m4-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-policycoreutils-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-popt-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-pip-wheel-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-boolean.py-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-license-expression-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt5-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt6-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-readline-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-redhat-rpm-config-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sequoia-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sign-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rust-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sed-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-targeted-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-setup-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tar-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tpm2-tss-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tzdata-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-unzip-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-core-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-which-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xxhash-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-libs-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zig-srpm-macros-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zip-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zlib-ng-compat-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zstd-s390x"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-s390x-syft"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-s390x-syft-debuginfo"}, {"spdxElementId": "SPDXRef-Buildroot-syft-s390x", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-s390x-syft-debugsource"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-R-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-add-determinism-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-alternatives-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-docs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-annobin-plugin-gcc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ansible-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-askalono-cli-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-audit-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bash-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-binutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-build-reproducibility-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-bzip2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ca-certificates-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cmake-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-common-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-coreutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpio-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cpp-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-config-default-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-crypto-policies-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-curl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-cyrus-sasl-lib-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-debugedit-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-diffutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-dwz-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ed-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-efi-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-debuginfod-client-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libelf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-elfutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-erlang-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-expat-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-filesystem-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-file-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-findutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fonts-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-forge-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-fpc-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gap-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gawk-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-plugin-annobin-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gcc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdb-minimal-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gdbm-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ghc-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-common-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-gconv-extra-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-minimal-langpack-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-glibc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gmp-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnat-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnome-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnulib-l10n-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-dirmngr-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpg-agent-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-gpgconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-keyboxd-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-verify-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnupg2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gnutls-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-filesystem-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-rpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-go-vendor-tools-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-bin-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-src-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golang1.27-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-golist-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gpgverify-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-grep-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-gzip-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-gpg-keys-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-release-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-hummingbird-repos-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ima-evm-utils-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-info-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-jansson-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-java-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-json-c-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-headers-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-kernel-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-keyutils-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-krb5-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libacl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libarchive-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libassuan-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libatomic-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libattr-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libblkid-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libbrotli-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-ng-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcap-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcbor-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcom-err-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libcurl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libeconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libevent-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfdisk-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libffi-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfido2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libfsverity-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgcrypt-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgomp-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libgpg-error-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libidn2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libksba-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-liblastlog2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmount-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libmpc-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libnghttp3-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpfm-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpkgconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libpsl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-utils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libselinux-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsemanage-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsepol-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libsmartcols-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-config-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libssh-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libstdc++-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtasn1-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libtool-ltdl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libunistring-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libusb1-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libuuid-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libverto-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-devel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxcrypt-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libxml2-16-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-libzstd-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-linkdupes-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lua-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-lz4-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-make-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-meson-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpdecimal-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-mpfr-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-base-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ncurses-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-nettle-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-crypto-ossl-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ngtcp2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-npth-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-ocaml-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openblas-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openldap-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-fips-provider-upstream-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-openssl-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-trust-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-p11-kit-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-package-notes-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pam-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-patch-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-syntax-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pcre2-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-perl-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-m4-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-pkg-config-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pkgconf-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-policycoreutils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-popt-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-publicsuffix-list-dafsa-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-pyproject-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-pip-wheel-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-boolean.py-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-license-expression-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-python3-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt5-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-qt6-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-readline-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-redhat-rpm-config-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-build-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-plugin-selinux-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sequoia-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-sign-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rpm-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-rust-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sed-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-targeted-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-selinux-policy-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-setup-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-shadow-utils-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-sqlite-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-systemd-standalone-sysusers-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tar-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tpm2-tss-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tree-sitter-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-tzdata-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-unzip-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-core-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-util-linux-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-which-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xxhash-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-libs-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-xz-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zig-srpm-macros-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zip-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zlib-ng-compat-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Buildroot-Package-zstd-x86-64"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-x86-64-syft"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-x86-64-syft-debuginfo"}, {"spdxElementId": "SPDXRef-Buildroot-syft-x86-64", "relationshipType": "BUILD_TOOL_OF", "relatedSpdxElement": "SPDXRef-x86-64-syft-debugsource"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-03a5e0e109116338", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-05d9b2aa62e5ad11", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-08272dfe2a9d62a9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-093c53a915e16000", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-0a299aeb42f049e9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-0b77caf80ea0511d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-0d1286ac0499afba", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-storage-0e962535eb1d6d77", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-subosito-gotenv-0f0e124c968d9751", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-henvic-httpretty-0fe1ffcb6734ef5f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-shopspring-decimal-11b96ebb9461110e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-otel-11e2722d3ca9a4ef", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-120e864e11f182fc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-12af8404e4dd8bcc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-13054f483e4c1dd6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-emirpasic-gods-169d5950ee056b4e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-16b53d9d918126db", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-16fc305df3ee74ff", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-1786985fe20e8463", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-smithy-go-18809bf13de32b86", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-19361100f0dde74c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-19fa33549e468fb3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-1b587c90586fbfed", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-1b8d1673179391d5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-1c2706937f83fd02", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-1d90063baf48202c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-1e0e7735477db07a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-1f44e64c63a9b8ba", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-1f853230f5dad2ee", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-206d7c1f65a01760", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-iam-217394b61df67b35", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-21b0a9278220bb37", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-22afceefc4fadf9a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-23bf819395a6ff79", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-agext-levenshtein-23ccf49810981b23", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-241ea1749f9d70f7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-251417f55a49f754", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-2523bb38577185bf", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-254b90c84d794f0e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-270603bf95afd322", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-271735b2c09c1622", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-27c32aca53188fd3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-28c01e0a3249d202", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-licensecheck-293346918b594f14", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-2a35d73045f292eb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-exp-2a670a2280191360", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-2c716bc63d930d89", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-2ca9c295eae69dae", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-version-2d8a07a3a5a38b80", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-2e9c3e87664566fa", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-2eb483d71a720099", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-2f00e5d4caf125d8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-3117c45942f0408e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-fifo-31a6c54e4b8a25b2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-pprof-33a409154a7d5fba", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-3529122dd1a0ce95", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-errors-358a89bfb5ce7813", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-cpuid-v2-361201935203269e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-370e8e8c2e4cb4d6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-38dcd7577306480b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v17-3a6d9ea43f41f68f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-3c2913b329bf0e46", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-3ca861759d2e6a68", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bitnami-go-version-3fda0eed7792f6a5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-404980ce1fd77308", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-40e3f02aa9617b4d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rivo-uniseg-42bef535db55fb1b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-431f5c8f5ac735d2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-4356e139501afc6c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-deitch-magic-4401d798566c6f7b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-45b75e571600d401", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-sync-45ece7f6c6603600", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-46e536c3b767664a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-4891d2811cc84108", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-492841238227a550", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-4a3cddc35adf83bb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-4aed4031373b7c9a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-4e1dff3a24ef602e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-557df6bbb5c1c4cb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-minio-minlz-582eb4fbcfad0fcc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-58ee2c391bc17f4e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-597c4f8427895637", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-5a3c1efca0c90f44", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-5a422b6636245a14", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-5cc1ebaf38b7a4a3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-5ed41e5e0385b784", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cncf-xds-go-601ebdf5859e15e8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-60e89bef97e7dade", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-6135ad05f5840660", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-DataDog-zstd-62294839c4d8335a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-62e2eda7731e5dbf", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-637c10788573241e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-6506bcbd1d90199b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-signal-652b3ee5e0a4f208", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-65573bc9e27ef698", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-logger-65f5a5bfb8da9b54", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-66151335077c15e0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-6b9cb3fe260c899c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-6d2657fdcb9ebcb0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-6f60ecd3b8d3a07f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-706dd59bec86085d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-70f0fd0c7cbb962b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-71a1ce25e5c98922", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-71b64d1b5e5f5217", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-71d4e54a6ec90e70", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-7213c96638626afd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mholt-archives-72f287d1b4e05798", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-74a26db5ebbbbf6c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-7631d834cbc8c9f3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-76baafffedf51903", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-adrg-xdg-7700b4c9ca27d4e5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-778b1ea1d69c0846", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-78fcbd758bddbe2b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-7922ad182fdf0651", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-mathutil-79cdae1a3ff1134b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-79da1b85907959db", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-7a0a93b245a3d892", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-7a5dbed10afaf5d8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-profile-7c3551b89851a805", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-7d5099b74f2d22bf", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-7fe2b9bb4cf4a830", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-continuity-808e446feeb7ed05", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-8195b14163a7f5ac", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jbenet-go-context-82a60d7d8fc76532", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-837058d2467dabcb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-87b833a174c648b2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-884740f62801ba85", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-889fa9d42b26391f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-huandu-xstrings-897928f5ebc4ab0b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-blakesmith-ar-8bdf2613989cf223", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-8c8a25d03726205a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-8f8858fcffab4cfb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-howett.net-plist-9034873c0e00c75f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-910c8e82974a5215", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-plugin-9141beff018cfab8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-9328957379bce3d0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-93584e6c3bd0f521", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gookit-color-97f8c3c1065b724f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-9950f1c270973641", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-afero-99add1478204b375", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-9c422284a54f0cb1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-9d0a0ec6eb3d73de", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-locker-9eb5c8fac452b5c5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-9ee04691d0f29078", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dsnet-compress-9f3b150e292e3c5b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-a0e4ab4c9a750b0a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-a123a3a958520bf1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-a247c88c111787d0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-a2da7ee7f11b869a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-a3422c09231cfc8b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-a483154429893394", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-a4dff55bfd12a3ee", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-a4e7d5858b22b9d6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-windows-a53f86ad3503eb61", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-a66f37acef129a31", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-ansi-a6f294ab58c45434", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-bubbly-a6fe84af298c6fcf", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-a74992ca746ea728", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-a77599fa8feceaf4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-a79fe934af186486", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-a828b7a20f2b35ae", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-a8e04310fdd673e9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-a97cc5738423fcee", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-aab8073ba58c8a0d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-ac153d98426e26be", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-ad37a208c10c3026", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-adafb4d87f39b301", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-aee470da722808bb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-saintfish-chardet-b08bb8ded5db8007", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-b0e7cb1502358121", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-b1c2ed56642f8c64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xi2-xz-b282e1ac6985dd7a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-b29f82f51e1dffbf", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-b2b8c899369d0688", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-fgprof-b3688822ef8f76dc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-b47702ccbb64f4ef", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-b509816a3c820e75", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-b61857513bdd834d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-b62139e20622b880", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-b707544d69ad9c1d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-b855b0975869d3d9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-b968eb01ff698237", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pborman-indent-b98109e969d6aaa0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jedib0t-go-pretty-v6-bca63f77bb905e12", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-bdba703399ae0c44", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-bf1e27193e9b3e7f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mgutz-ansi-bf44f11a27092d29", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-xerrors-bf48a97bc6e6c213", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-bf628c25da688b9c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-c02a771ee8911f1b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-c09e0a2899d822a0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-c1416f11c9aacbdf", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-c1bc2fa66dce3a67", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-piprate-json-gold-c23c3d63667a6df7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-tools-c30343a0924a5201", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-c3fbeaf64eba0df6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-c460e4da1757894f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cel.dev-expr-c51cdb5526844269", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-gordf-c663d08f5e8e7013", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-c68af344b19f9ff4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-xattr-c80070c35ab119e3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-c817c4616874dc26", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-c8bc6c981cadc45c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-collections-ca8816aeb1cc97de", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-termenv-cae7069cfa9b1d52", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-cbc8baf3b61e29e7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-cc2980b5acdc6901", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-cdf33ccaabac67fa", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-viper-cef22228a4bc4536", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-cf5a8de2c80af304", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-cfe5984e56fadd09", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-cffa006b66cdd7fb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sergi-go-diff-d1cfec4ab3fb921a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zyedidia-generic-d2161209288501ac", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-d316708e1e2b9d30", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-d5fb37f66f14834c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-ll-d6bf01caba1b5946", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-therootcompany-xz-d85b120bb1810dae", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-d86ba323c64dbbad", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-d9d4c19de4794dff", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vifraa-gopom-da94213662c9de9b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-libc-db6629e3acc874ba", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-dbe86b34eed7194d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-dc6d2f5d88dee29b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-dd51a7c468cd0634", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fatih-color-dd7803a0c37fda79", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-df454b006fecf55b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-e06ae34f74a85ab1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-e0c690f0159793c5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-e1291ae11a591e3e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-clio-e1548c7c53872193", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-e1bf91bbb3753b61", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-e245b026512336f6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-e2bb3e9519f0f73e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-e2c3c5f87532b417", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-fangs-e36edb4a0a568dd8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-gcfg-e40b617f499a5a0a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-e43f84ec1b095da6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-scylladb-go-set-e4bc96a8e42e6fd8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-e505500a22b08c74", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-e508fc318cac6c69", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go4.org-e51fd80848f5f8cb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-sqlite-e83e5655782d5652", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-e85382ab0da19c2d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-e8596b2b5a5786e2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tailscale-hujson-e878fc00de5325e8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-memory-e8d78e2d0f707465", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-e972f0407c503d2a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-ea38c51c2b46d27e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-groupcache-eb157f6f6ee2c229", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-eb23cf040a1c3e89", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-ebf43ffea19ac19e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-edb07b5dfc98ea0d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-f18be99a242092aa", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-f1d23dc004013363", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-f25e63361fe42e75", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-f329a37d4f34823b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-f419cdb31ec96663", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-f4ba379c23c93530", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-f596e9cf3b8c199a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-f6994cc1ab16b9f4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-cat-f72ce2effaabb165", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-f7af8d7b506103af", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-f7dcc97b892f71c3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-f95186686590259f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-fa522217d7b3f08b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-fa7da59cede61c74", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-fc848e8ff018564a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-fc90a38b069ba9d9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xo-terminfo-fcc5be61f020a9c0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-fde02eb8ab2b973f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-fde8479550dbd7e0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-fecf7c9a36147246", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-ff3de2e08b498951", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-ff82b60dcdcb041a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-03a5e0e109116338", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-05d9b2aa62e5ad11", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-08272dfe2a9d62a9", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-093c53a915e16000", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-0a299aeb42f049e9", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-0b77caf80ea0511d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-0d1286ac0499afba", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-storage-0e962535eb1d6d77", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-subosito-gotenv-0f0e124c968d9751", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-henvic-httpretty-0fe1ffcb6734ef5f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-shopspring-decimal-11b96ebb9461110e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-otel-11e2722d3ca9a4ef", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-120e864e11f182fc", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-12af8404e4dd8bcc", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-13054f483e4c1dd6", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-emirpasic-gods-169d5950ee056b4e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-16b53d9d918126db", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-16fc305df3ee74ff", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-1786985fe20e8463", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-smithy-go-18809bf13de32b86", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-19361100f0dde74c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-19fa33549e468fb3", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-1b587c90586fbfed", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-1b8d1673179391d5", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-1c2706937f83fd02", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-1d90063baf48202c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-1e0e7735477db07a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-1f44e64c63a9b8ba", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-1f853230f5dad2ee", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-206d7c1f65a01760", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-iam-217394b61df67b35", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-21b0a9278220bb37", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-22afceefc4fadf9a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-23bf819395a6ff79", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-agext-levenshtein-23ccf49810981b23", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-241ea1749f9d70f7", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-251417f55a49f754", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-2523bb38577185bf", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-254b90c84d794f0e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-270603bf95afd322", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-271735b2c09c1622", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-27c32aca53188fd3", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-28c01e0a3249d202", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-licensecheck-293346918b594f14", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-2a35d73045f292eb", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-exp-2a670a2280191360", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-rpm-syft-2bf815fa5dd37922", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-2c716bc63d930d89", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-2ca9c295eae69dae", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-version-2d8a07a3a5a38b80", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-2e9c3e87664566fa", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-2eb483d71a720099", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-2f00e5d4caf125d8", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-3117c45942f0408e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-fifo-31a6c54e4b8a25b2", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-pprof-33a409154a7d5fba", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-3529122dd1a0ce95", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-errors-358a89bfb5ce7813", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-cpuid-v2-361201935203269e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-370e8e8c2e4cb4d6", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-38dcd7577306480b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v17-3a6d9ea43f41f68f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-3c2913b329bf0e46", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-3ca861759d2e6a68", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bitnami-go-version-3fda0eed7792f6a5", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-404980ce1fd77308", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-40e3f02aa9617b4d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rivo-uniseg-42bef535db55fb1b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-431f5c8f5ac735d2", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-4356e139501afc6c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-deitch-magic-4401d798566c6f7b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-45b75e571600d401", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-sync-45ece7f6c6603600", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-46e536c3b767664a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-4891d2811cc84108", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-492841238227a550", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-4a3cddc35adf83bb", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-4aed4031373b7c9a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-4e1dff3a24ef602e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-557df6bbb5c1c4cb", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-minio-minlz-582eb4fbcfad0fcc", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-58ee2c391bc17f4e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-597c4f8427895637", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-5a3c1efca0c90f44", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-5a422b6636245a14", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-5cc1ebaf38b7a4a3", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-5ed41e5e0385b784", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cncf-xds-go-601ebdf5859e15e8", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-60e89bef97e7dade", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-6135ad05f5840660", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-DataDog-zstd-62294839c4d8335a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-62e2eda7731e5dbf", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-637c10788573241e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-6506bcbd1d90199b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-signal-652b3ee5e0a4f208", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-65573bc9e27ef698", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-logger-65f5a5bfb8da9b54", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-66151335077c15e0", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-6b9cb3fe260c899c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-6d2657fdcb9ebcb0", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-6f60ecd3b8d3a07f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-706dd59bec86085d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-70f0fd0c7cbb962b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-71a1ce25e5c98922", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-71b64d1b5e5f5217", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-71d4e54a6ec90e70", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-7213c96638626afd", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mholt-archives-72f287d1b4e05798", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-74a26db5ebbbbf6c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-7631d834cbc8c9f3", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-76baafffedf51903", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-adrg-xdg-7700b4c9ca27d4e5", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-778b1ea1d69c0846", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-78fcbd758bddbe2b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-7922ad182fdf0651", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-mathutil-79cdae1a3ff1134b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-79da1b85907959db", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-7a0a93b245a3d892", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-7a5dbed10afaf5d8", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-profile-7c3551b89851a805", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-7d5099b74f2d22bf", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-7fe2b9bb4cf4a830", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-continuity-808e446feeb7ed05", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-8195b14163a7f5ac", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jbenet-go-context-82a60d7d8fc76532", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-837058d2467dabcb", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-87b833a174c648b2", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-884740f62801ba85", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-889fa9d42b26391f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-huandu-xstrings-897928f5ebc4ab0b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-blakesmith-ar-8bdf2613989cf223", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-8c8a25d03726205a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-8f8858fcffab4cfb", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-howett.net-plist-9034873c0e00c75f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-910c8e82974a5215", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-plugin-9141beff018cfab8", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-9328957379bce3d0", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-93584e6c3bd0f521", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gookit-color-97f8c3c1065b724f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-9950f1c270973641", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-afero-99add1478204b375", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-9c422284a54f0cb1", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-9d0a0ec6eb3d73de", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-locker-9eb5c8fac452b5c5", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-9ee04691d0f29078", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dsnet-compress-9f3b150e292e3c5b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-a0e4ab4c9a750b0a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-a123a3a958520bf1", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-a247c88c111787d0", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-a2da7ee7f11b869a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-a3422c09231cfc8b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-a483154429893394", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-a4dff55bfd12a3ee", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-a4e7d5858b22b9d6", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-windows-a53f86ad3503eb61", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-a66f37acef129a31", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-ansi-a6f294ab58c45434", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-bubbly-a6fe84af298c6fcf", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-a74992ca746ea728", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-a77599fa8feceaf4", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-a79fe934af186486", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-a828b7a20f2b35ae", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-a8e04310fdd673e9", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-a97cc5738423fcee", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-aab8073ba58c8a0d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-ac153d98426e26be", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-ad37a208c10c3026", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-adafb4d87f39b301", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-aee470da722808bb", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-saintfish-chardet-b08bb8ded5db8007", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-b0e7cb1502358121", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-b1c2ed56642f8c64", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xi2-xz-b282e1ac6985dd7a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-b29f82f51e1dffbf", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-b2b8c899369d0688", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-fgprof-b3688822ef8f76dc", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-b47702ccbb64f4ef", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-b509816a3c820e75", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-b61857513bdd834d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-b62139e20622b880", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-b707544d69ad9c1d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-b855b0975869d3d9", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-b968eb01ff698237", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pborman-indent-b98109e969d6aaa0", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jedib0t-go-pretty-v6-bca63f77bb905e12", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-bdba703399ae0c44", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-bf1e27193e9b3e7f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mgutz-ansi-bf44f11a27092d29", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-xerrors-bf48a97bc6e6c213", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-bf628c25da688b9c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-c02a771ee8911f1b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-c09e0a2899d822a0", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-c1416f11c9aacbdf", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-c1bc2fa66dce3a67", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-piprate-json-gold-c23c3d63667a6df7", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-tools-c30343a0924a5201", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-c3fbeaf64eba0df6", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-c460e4da1757894f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cel.dev-expr-c51cdb5526844269", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-gordf-c663d08f5e8e7013", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-c68af344b19f9ff4", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-xattr-c80070c35ab119e3", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-c817c4616874dc26", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-c8bc6c981cadc45c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-collections-ca8816aeb1cc97de", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-termenv-cae7069cfa9b1d52", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-cbc8baf3b61e29e7", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-cc2980b5acdc6901", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-cdf33ccaabac67fa", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-viper-cef22228a4bc4536", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-cf5a8de2c80af304", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-cfe5984e56fadd09", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-cffa006b66cdd7fb", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sergi-go-diff-d1cfec4ab3fb921a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zyedidia-generic-d2161209288501ac", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-d316708e1e2b9d30", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-d5fb37f66f14834c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-ll-d6bf01caba1b5946", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-therootcompany-xz-d85b120bb1810dae", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-d86ba323c64dbbad", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-d9d4c19de4794dff", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vifraa-gopom-da94213662c9de9b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-libc-db6629e3acc874ba", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-dbe86b34eed7194d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-dc6d2f5d88dee29b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-dd51a7c468cd0634", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fatih-color-dd7803a0c37fda79", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-df454b006fecf55b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-e06ae34f74a85ab1", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-e0c690f0159793c5", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-e1291ae11a591e3e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-clio-e1548c7c53872193", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-e1bf91bbb3753b61", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-e245b026512336f6", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-e2bb3e9519f0f73e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-e2c3c5f87532b417", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-fangs-e36edb4a0a568dd8", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-gcfg-e40b617f499a5a0a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-e43f84ec1b095da6", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-scylladb-go-set-e4bc96a8e42e6fd8", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-e505500a22b08c74", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-e508fc318cac6c69", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go4.org-e51fd80848f5f8cb", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-sqlite-e83e5655782d5652", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-e85382ab0da19c2d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-e8596b2b5a5786e2", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tailscale-hujson-e878fc00de5325e8", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-memory-e8d78e2d0f707465", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-e972f0407c503d2a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-ea38c51c2b46d27e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-groupcache-eb157f6f6ee2c229", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-eb23cf040a1c3e89", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-ebf43ffea19ac19e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-edb07b5dfc98ea0d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-f18be99a242092aa", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-f1d23dc004013363", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-f25e63361fe42e75", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-f329a37d4f34823b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-f419cdb31ec96663", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-f4ba379c23c93530", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-f596e9cf3b8c199a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-f6994cc1ab16b9f4", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-cat-f72ce2effaabb165", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-f7af8d7b506103af", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-f7dcc97b892f71c3", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-f95186686590259f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-fa522217d7b3f08b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-fa7da59cede61c74", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-fc848e8ff018564a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-fc90a38b069ba9d9", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xo-terminfo-fcc5be61f020a9c0", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-fde02eb8ab2b973f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-fde8479550dbd7e0", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-fecf7c9a36147246", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-ff3de2e08b498951", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-ff82b60dcdcb041a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-cel.dev-expr-c51cdb5526844269", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-9328957379bce3d0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-1786985fe20e8463", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-4e1dff3a24ef602e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-d86ba323c64dbbad", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-iam-217394b61df67b35", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-6135ad05f5840660", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-storage-0e962535eb1d6d77", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-dario.cat-mergo-a828b7a20f2b35ae", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-b707544d69ad9c1d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-08272dfe2a9d62a9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-DataDog-zstd-62294839c4d8335a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-8f8858fcffab4cfb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-fa7da59cede61c74", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-b855b0975869d3d9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-9950f1c270973641", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-e1291ae11a591e3e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-fde02eb8ab2b973f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-3529122dd1a0ce95", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-3c2913b329bf0e46", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-65573bc9e27ef698", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-1b8d1673179391d5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-e508fc318cac6c69", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-adrg-xdg-7700b4c9ca27d4e5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-agext-levenshtein-23ccf49810981b23", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-bubbly-a6fe84af298c6fcf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-clio-e1548c7c53872193", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-fangs-e36edb4a0a568dd8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-collections-ca8816aeb1cc97de", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-28c01e0a3249d202", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-logger-65f5a5bfb8da9b54", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-1e0e7735477db07a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-70f0fd0c7cbb962b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-7631d834cbc8c9f3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-f7af8d7b506103af", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-sync-45ece7f6c6603600", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-version-2d8a07a3a5a38b80", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-5ed41e5e0385b784", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-0a299aeb42f049e9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-df17043bd59733cf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-23bf819395a6ff79", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-f25e63361fe42e75", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v17-3a6d9ea43f41f68f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-16fc305df3ee74ff", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-9d0a0ec6eb3d73de", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-f95186686590259f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-a123a3a958520bf1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-13054f483e4c1dd6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-706dd59bec86085d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-4891d2811cc84108", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-b61857513bdd834d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-1c2706937f83fd02", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-aee470da722808bb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-46e536c3b767664a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-2eb483d71a720099", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-62e2eda7731e5dbf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-637c10788573241e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-cf5a8de2c80af304", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-a2da7ee7f11b869a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-5a422b6636245a14", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-cfe5984e56fadd09", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-a0e4ab4c9a750b0a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-smithy-go-18809bf13de32b86", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-a66f37acef129a31", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-f7dcc97b892f71c3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-c1416f11c9aacbdf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bitnami-go-version-3fda0eed7792f6a5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-blakesmith-ar-8bdf2613989cf223", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-2ca9c295eae69dae", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-0d1286ac0499afba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-ac153d98426e26be", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bodgit-windows-a53f86ad3503eb61", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-38dcd7577306480b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-f419cdb31ec96663", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-4aed4031373b7c9a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-1f853230f5dad2ee", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-e245b026512336f6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-79da1b85907959db", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-a97cc5738423fcee", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-a4dff55bfd12a3ee", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-9c422284a54f0cb1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-16b53d9d918126db", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-0b77caf80ea0511d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cloudflare-circl-5a3c1efca0c90f44", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cncf-xds-go-601ebdf5859e15e8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-a247c88c111787d0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-f18be99a242092aa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-continuity-808e446feeb7ed05", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-837058d2467dabcb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-dd51a7c468cd0634", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-fifo-31a6c54e4b8a25b2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-log-c460e4da1757894f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-log-otel-11e2722d3ca9a4ef", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-platforms-fa522217d7b3f08b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-plugin-9141beff018cfab8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-e972f0407c503d2a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-7a0a93b245a3d892", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-f329a37d4f34823b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-deitch-magic-4401d798566c6f7b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-120e864e11f182fc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-distribution-reference-2c716bc63d930d89", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-cli-6d2657fdcb9ebcb0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-19361100f0dde74c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-connections-fecf7c9a36147246", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-units-e85382ab0da19c2d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dsnet-compress-9f3b150e292e3c5b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-404980ce1fd77308", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-2523bb38577185bf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-emirpasic-gods-169d5950ee056b4e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-05d9b2aa62e5ad11", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-557df6bbb5c1c4cb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-fc848e8ff018564a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fatih-color-dd7803a0c37fda79", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-fgprof-b3688822ef8f76dc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-431f5c8f5ac735d2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-93584e6c3bd0f521", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-e2bb3e9519f0f73e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-71a1ce25e5c98922", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-git-gcfg-e40b617f499a5a0a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-910c8e82974a5215", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-71d4e54a6ec90e70", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-a4e7d5858b22b9d6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-df454b006fecf55b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-a79fe934af186486", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-8195b14163a7f5ac", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-b62139e20622b880", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-889fa9d42b26391f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-12af8404e4dd8bcc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-groupcache-eb157f6f6ee2c229", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-cmp-ff3de2e08b498951", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-c8bc6c981cadc45c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-licensecheck-293346918b594f14", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-pprof-33a409154a7d5fba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-s2a-go-7922ad182fdf0651", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-b1c2ed56642f8c64", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-cdf33ccaabac67fa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-03a5e0e109116338", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gookit-color-97f8c3c1065b724f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-206d7c1f65a01760", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-e43f84ec1b095da6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-ebf43ffea19ac19e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-7213c96638626afd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-370e8e8c2e4cb4d6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-e8596b2b5a5786e2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-492841238227a550", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-40e3f02aa9617b4d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-e06ae34f74a85ab1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-henvic-httpretty-0fe1ffcb6734ef5f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-huandu-xstrings-897928f5ebc4ab0b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-e1bf91bbb3753b61", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jbenet-go-context-82a60d7d8fc76532", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jedib0t-go-pretty-v6-bca63f77bb905e12", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jinzhu-copier-6506bcbd1d90199b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-json-iterator-go-4a3cddc35adf83bb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-c1bc2fa66dce3a67", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-7d5099b74f2d22bf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-compress-a77599fa8feceaf4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-cpuid-v2-361201935203269e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-e505500a22b08c74", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-ff82b60dcdcb041a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-f1d23dc004013363", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-2a35d73045f292eb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-a8e04310fdd673e9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mgutz-ansi-bf44f11a27092d29", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mholt-archives-72f287d1b4e05798", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-597c4f8427895637", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-minio-minlz-582eb4fbcfad0fcc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-c09e0a2899d822a0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-4356e139501afc6c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-d5fb37f66f14834c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-b2b8c899369d0688", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-78fcbd758bddbe2b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-locker-9eb5c8fac452b5c5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-api-b47702ccbb64f4ef", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-client-b968eb01ff698237", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-22afceefc4fadf9a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-signal-652b3ee5e0a4f208", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-user-74a26db5ebbbbf6c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-userns-ad37a208c10c3026", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-778b1ea1d69c0846", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-cffa006b66cdd7fb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-muesli-ansi-a6f294ab58c45434", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-ea38c51c2b46d27e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-muesli-termenv-cae7069cfa9b1d52", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-7fe2b9bb4cf4a830", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-76baafffedf51903", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-cat-f72ce2effaabb165", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-errors-358a89bfb5ce7813", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-ll-d6bf01caba1b5946", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-3ca861759d2e6a68", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-45b75e571600d401", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-3117c45942f0408e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-c3fbeaf64eba0df6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pborman-indent-b98109e969d6aaa0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-60e89bef97e7dade", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-a483154429893394", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-271735b2c09c1622", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-piprate-json-gold-c23c3d63667a6df7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-fde8479550dbd7e0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-errors-b0e7cb1502358121", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-profile-7c3551b89851a805", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-xattr-c80070c35ab119e3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-19fa33549e468fb3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-dc6d2f5d88dee29b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-rivo-uniseg-42bef535db55fb1b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-8c8a25d03726205a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-87b833a174c648b2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-saintfish-chardet-b08bb8ded5db8007", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-a3422c09231cfc8b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-scylladb-go-set-e4bc96a8e42e6fd8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sergi-go-diff-d1cfec4ab3fb921a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-shopspring-decimal-11b96ebb9461110e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-f4ba379c23c93530", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-58ee2c391bc17f4e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-21b0a9278220bb37", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-bdba703399ae0c44", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-7a5dbed10afaf5d8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spdx-gordf-c663d08f5e8e7013", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-5cc1ebaf38b7a4a3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-afero-99add1478204b375", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cast-cc2980b5acdc6901", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cobra-e0c690f0159793c5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-d316708e1e2b9d30", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-viper-cef22228a4bc4536", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-241ea1749f9d70f7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-subosito-gotenv-0f0e124c968d9751", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-1d90063baf48202c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-b29f82f51e1dffbf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tailscale-hujson-e878fc00de5325e8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-therootcompany-xz-d85b120bb1810dae", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-9ee04691d0f29078", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-bf1e27193e9b3e7f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vifraa-gopom-da94213662c9de9b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-aab8073ba58c8a0d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-adafb4d87f39b301", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-66151335077c15e0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xi2-xz-b282e1ac6985dd7a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xo-terminfo-fcc5be61f020a9c0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-71b64d1b5e5f5217", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-zyedidia-generic-d2161209288501ac", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-093c53a915e16000", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-251417f55a49f754", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-dbe86b34eed7194d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-e2c3c5f87532b417", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-270603bf95afd322", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-1b587c90586fbfed", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-1f44e64c63a9b8ba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-bf628c25da688b9c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-a74992ca746ea728", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-c817c4616874dc26", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-go4.org-e51fd80848f5f8cb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-cbc8baf3b61e29e7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-exp-2a670a2280191360", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-mod-6b9cb3fe260c899c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-d9d4c19de4794dff", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-oauth2-f596e9cf3b8c199a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-2f00e5d4caf125d8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-b509816a3c820e75", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-term-c02a771ee8911f1b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-2e9c3e87664566fa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-time-c68af344b19f9ff4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-tools-c30343a0924a5201", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-xerrors-bf48a97bc6e6c213", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-api-254b90c84d794f0e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-edb07b5dfc98ea0d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-6f60ecd3b8d3a07f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-f6994cc1ab16b9f4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-27c32aca53188fd3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-884740f62801ba85", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-eb23cf040a1c3e89", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-howett.net-plist-9034873c0e00c75f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-libc-db6629e3acc874ba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-mathutil-79cdae1a3ff1134b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-memory-e8d78e2d0f707465", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-sqlite-e83e5655782d5652", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-go-module-stdlib-fc90a38b069ba9d9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-rpm-syft-2bf815fa5dd37922", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-aarch64-syft", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.aarch64"}, {"spdxElementId": "SPDXRef-Package-rpm-syft-a76c56f2f615c9b5", "relatedSpdxElement": "SPDXRef-File-...bin-syft-1.54.1-0.2.hum1.aarch64.debug-5cbd6efd485f62cf", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-debuginfo-1.54.1-0.2.hum1.aarch64", "relatedSpdxElement": "SPDXRef-Package-rpm-syft-a76c56f2f615c9b5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-syft-debuginfo-1.54.1-0.2.hum1.aarch64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-aarch64-syft-debuginfo", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-syft-debuginfo-1.54.1-0.2.hum1.aarch64"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-syft-debugsource-1.54.1-0.2.hum1.aarch64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-aarch64-syft-debugsource", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-syft-debugsource-1.54.1-0.2.hum1.aarch64"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-001bfd36625562ba", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fatih-color-00d6c54b6519ec6b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zyedidia-generic-0156ecc9cdffef5e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-01e0ca909b2fce23", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-viper-02cd0675a0468b10", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-0315eefd8c898d56", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-039f852a33b92d0b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-0451debb142001ea", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-sqlite-06beeaae9ebf5674", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-0727ecff2c851a26", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-08b82c3b61b10764", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-08cac120b1536c53", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-090662b0e012028c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-continuity-097339753e8dc2f3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-0a3e8e0000dd9d12", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-saintfish-chardet-0b0a504e53e99cc9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-0c101f19e1cfa697", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-fangs-0e3e0500596486f2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gookit-color-0e7bbefeb42117a5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-0ef613442226576b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-107318bb3567ab8d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-14e658828df95cea", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-windows-16dd850e3671318b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-16f5da1f3d279f3e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-18c9902d2911a42f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-19b825adf1a22f1e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-tools-1af10d989c5fd75f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-1b4366cbd170c64a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-1b7e34302281dc6f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xi2-xz-1b890aee07559a00", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-1c83651d2fde1cd3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-1d50914ff96faf14", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-1d9880cf0dece79d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-1e1a7aef80a6c68c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-1e893dfdbe633dba", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-shopspring-decimal-1f95b4c3d528e754", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-1fe08547db4a53e1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bitnami-go-version-1fe4673a8e2a782b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-2074b1a8f7f766d1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-20d74e1f46a92a18", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-blakesmith-ar-21217de5f37b5515", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-2203b39fb1ffa178", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-huandu-xstrings-2595fa3f4599d6c9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-exp-269e794bd0a3225a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-termenv-26f4f5efdafb23b0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-27ae2ddf26491e0d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-licensecheck-27d7eba06299bea6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-2a0bb83b8c00d9e5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-2a27344f1065c62c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-2aa064d6b34a524f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jbenet-go-context-2b32b589248bb664", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-2baae36713832565", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-2c4fa45519769b33", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-2ca729a64708cc53", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-2f4451408657c478", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-3013fe9b07e604ca", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-profile-3265c8d23395474f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-34f8fdb7564de4bd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-fifo-354ac39ddda2028c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-355d6bfd0cdce40f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-errors-37b4a9b80fbf352d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-3a2cdcacf1f99dbc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-3ab23999912b59f0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-collections-3f00d0bcf1ac6844", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-414d88058e4e800a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-42d185afd72a1a9e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-43800e4fd0d969e7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-44186e0ba7dae7bd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-45ebb7abb740ceda", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-4602124246c7330e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-deitch-magic-470e2ef52538f585", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-4865e8a7a186d4f4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-4a015440de5fc851", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-4a03e59bfd3d6c22", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-4b2002bf2b5b7a90", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-DataDog-zstd-4c32d5de56bc78d8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-4f81adc1b1c6d4d8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-5611a27d7ac7474a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-5668f2b74a2d24e9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-57551e23f2d303e8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-576798fb40e7b661", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-578e9d996bf5d9b7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-57cb16f3594bdfbf", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-sync-58c62323d4870c5e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-ll-58d5582fae812228", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-bubbly-597e7d9f6a0329b9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-5accdc634261df6f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-5ad43d0e1afbc47f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-5b3ff5624d3eb4b8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pborman-indent-5bf550ae7cdaf7b6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-5bfe7f35ccc8f59e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-5d10b0748067dc39", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-5d1e6aff3bda7771", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-5e321fbf38d4cd6c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-5f2497f630a39a6a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-5fae9dbcdc04114f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-6217abe5cfff3196", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-64fb852e2a776700", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-659e31124494f0e5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-65d07a903b44550b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-66ba331675153dfb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-66d500492fae990a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-storage-6800a0a78611e519", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-otel-691dec3dfe196e5d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-6967ca0436ef8595", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rivo-uniseg-6a10ed3a5407ea69", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-6acbbcd34291f5a0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-6e4d66dff9cf2d9c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-6e754f69326821ba", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-6ed35f21faba0716", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-7067b21e2031085a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-70ad11297dc12277", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-7137c6ccad005412", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-7163216d75ab743d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-718e7186b220be64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-71c81822b1e9d1e5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-72f000ad7d3513b0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-742aca26c57f6ffe", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-75cef683cf293905", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-764fe4ba1ba5f636", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-7a1f5d0bf7bf8c77", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-7a76fa69fbaf9eb6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-7b68ef4e752d10c2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-iam-7bb6ec5683962a67", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dsnet-compress-7c0933ca79561f11", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sergi-go-diff-7d5e6ce92af33a4c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-agext-levenshtein-7df026d990bcdf01", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-subosito-gotenv-7f6e98c5e7aca347", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-7f789043e802f18c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-7fa5ed572fc22ee1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-xattr-80629bae10219885", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-826ecc168d787c11", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mholt-archives-82ff43744d04ecfa", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-84665cc27ccbf4bc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-846d9a39297aa602", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-85186a52cf720ae6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-emirpasic-gods-85762e38c0ad17f0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-85d3974960a67798", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cncf-xds-go-8610713f81695b9a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-pprof-89eb324efd6718f0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go4.org-8a66e013ba4029d1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v17-8bc5aedb13dca2d5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-8c7c5960dfd5ea9c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-8cd26195081bd490", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-8d6dcceb945f14aa", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-8e604804d292e726", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-8f1948d2f885406f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-locker-8f5f52e9a50c87d3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-8fa65411804d13b5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-90185830b5e0c0f5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-903587a948177714", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-937d2cc58490ebe0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-93847d524504048c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-gcfg-93c4800e38e91fa0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-9453340a6b704c4c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-memory-9716e41eb5bab06f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-986247bc6447cc68", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-9a2e4462d83b7521", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-xerrors-9b1797490b0b55b9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-9b82ef796628d33a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-9c2c26897326f5d7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-logger-9c3895a50ba4985a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-9c650a45f3d7108a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-signal-9cfcffeff8f34c46", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-9d3e5a3286fcad55", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-9e88b1a4cc0496bc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-gordf-9fd0a261be0a7881", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-a0fa26ad2c1706af", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-a191a2a9c12fc345", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-a23101c329da5c9d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-a3cedba212706fc9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-a4a57ee8c74d650f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-a4d06e781ccf2d23", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-a5465d726b15e664", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-a5c0950a359e00e4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cel.dev-expr-a7df6a72bcffdad7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-a88149578be772f4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-a95e397561a70321", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-howett.net-plist-a9988714e723756d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-acbe432e88ddfc5c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-cat-aeb3a6a7bcab188f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-b0943a26d5e47322", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-b12b030b3252b6aa", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-b23e8aab148a0f45", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-b3747ed261fa297f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-plugin-b3879231eb9b17ca", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-afero-b41944b9afb76ebf", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-b41d0231ac38fc09", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-fgprof-b5e875d79d22c9c6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-b86e900620cd731d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-b92c735a7286cb95", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-adrg-xdg-b9498e9ef865c60f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-b96fe175a96ae97d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-b9a2cc3edeb1ad24", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-bba69ae05aa79c1e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-bc41e3495c043bce", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-bc88c25f250a186c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-bcbfbc11d6dab1a2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-bda4c55dbbd66de7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-bdaf5e4aaff72519", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-bfbc61b0bb4ba998", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-smithy-go-bfc935e427903ffc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-c00d005f6322366c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-c1ba6a9628a30972", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-c28b948cf11e819c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-c49fdacec2594820", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jedib0t-go-pretty-v6-c4ef1d361a9a33bc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-c5abb11c3ea6e681", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-mathutil-c83f1b706dc59f71", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-c897cbd00edd3fd7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-c8db2922ad128f6e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-minio-minlz-c9891e4191aa5ace", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-cb131efbd31e0296", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-therootcompany-xz-cb2d33f009bda628", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-henvic-httpretty-cc6c6f82c426f0e1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-piprate-json-gold-cc76c1fbdd9e54b9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-ce2d90700744ec35", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-d178047549b53835", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-d3714791c451b517", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-d480a66d24710fb0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-d5078ef3e2b50a6b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-scylladb-go-set-d5914170cd48c156", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-d63ace6d338894ca", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-d6fd8d45010e4846", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-d703fa66061c4460", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-d71a2ad67b06ad10", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-version-d9c3cf6e178c6af2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-dfa9a326d7f9bcfe", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-e0ce66e7d5880f46", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-e1e12a00b785ba88", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mgutz-ansi-e2dd9bac2ba5039f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-e2fa5a5c9ba69824", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-e366299bde179411", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-e505a7135b25e9c0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-e738f20d9fad0a4b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-e84e454b2a868689", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-e9447c4bc4db8f53", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-eb0585a27f8e84ce", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-libc-ed3192d7a1ec55a8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-ed3caa1a3839c859", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xo-terminfo-ee420fbd0a9922d6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-ee6a78a16d185fcb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-ef23980a56cbac10", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-efe911257d126e00", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-eff97c3330427173", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-f0f7cb9f78d83735", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-f10e8d6aab87e61f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-f173863292b8d677", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-f1760502f86e2150", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-f1f5c037241253b5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-f2ca3bfd8b70cc64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-f31c9344f15e8655", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-f351e1b55d009e69", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-f469b53413ff7076", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-f4c9c88387beedc9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-f4d69f7cc2af0ce9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-f4eb78fa919afae8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-f5e8e26eda472023", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-ansi-f82c9dded26171f6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-f85c2bb7eded4d61", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-f9feb60a373f8baf", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-fa253031e042c9b3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-groupcache-fa3f8b715c99cdc7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-fa4417685f091bd2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vifraa-gopom-fae08c471baae6e9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-faf25355bb48670c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-fb9c34898325e0d1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-fc25ff5d482eb5c7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-fc77695bfda879ad", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-fc90a38b069ba9d9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-clio-fde9c4a8bcada52d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tailscale-hujson-fe108b0881fc655e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-feac8b36bf25f68f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-ff454b551bdc14a9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-001bfd36625562ba", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fatih-color-00d6c54b6519ec6b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zyedidia-generic-0156ecc9cdffef5e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-01e0ca909b2fce23", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-viper-02cd0675a0468b10", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-0315eefd8c898d56", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-039f852a33b92d0b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-0451debb142001ea", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-sqlite-06beeaae9ebf5674", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-0727ecff2c851a26", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-08b82c3b61b10764", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-08cac120b1536c53", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-090662b0e012028c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-continuity-097339753e8dc2f3", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-0a3e8e0000dd9d12", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-saintfish-chardet-0b0a504e53e99cc9", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-0c101f19e1cfa697", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-fangs-0e3e0500596486f2", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gookit-color-0e7bbefeb42117a5", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-0ef613442226576b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-107318bb3567ab8d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-14e658828df95cea", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-windows-16dd850e3671318b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-16f5da1f3d279f3e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-18c9902d2911a42f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-19b825adf1a22f1e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-tools-1af10d989c5fd75f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-1b4366cbd170c64a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-1b7e34302281dc6f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xi2-xz-1b890aee07559a00", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-1c83651d2fde1cd3", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-1d50914ff96faf14", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-1d9880cf0dece79d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-1e1a7aef80a6c68c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-1e893dfdbe633dba", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-shopspring-decimal-1f95b4c3d528e754", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-1fe08547db4a53e1", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bitnami-go-version-1fe4673a8e2a782b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-2074b1a8f7f766d1", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-20d74e1f46a92a18", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-blakesmith-ar-21217de5f37b5515", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-2203b39fb1ffa178", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-huandu-xstrings-2595fa3f4599d6c9", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-exp-269e794bd0a3225a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-termenv-26f4f5efdafb23b0", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-27ae2ddf26491e0d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-licensecheck-27d7eba06299bea6", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-2a0bb83b8c00d9e5", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-2a27344f1065c62c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-2aa064d6b34a524f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jbenet-go-context-2b32b589248bb664", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-2baae36713832565", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-2c4fa45519769b33", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-2ca729a64708cc53", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-2f4451408657c478", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-3013fe9b07e604ca", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-profile-3265c8d23395474f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-34f8fdb7564de4bd", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-fifo-354ac39ddda2028c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-355d6bfd0cdce40f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-errors-37b4a9b80fbf352d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-3a2cdcacf1f99dbc", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-3ab23999912b59f0", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-collections-3f00d0bcf1ac6844", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-414d88058e4e800a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-42d185afd72a1a9e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-43800e4fd0d969e7", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-44186e0ba7dae7bd", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-45ebb7abb740ceda", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-4602124246c7330e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-deitch-magic-470e2ef52538f585", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-4865e8a7a186d4f4", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-4a015440de5fc851", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-4a03e59bfd3d6c22", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-4b2002bf2b5b7a90", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-DataDog-zstd-4c32d5de56bc78d8", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-4f81adc1b1c6d4d8", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-5611a27d7ac7474a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-5668f2b74a2d24e9", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-57551e23f2d303e8", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-576798fb40e7b661", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-578e9d996bf5d9b7", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-57cb16f3594bdfbf", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-sync-58c62323d4870c5e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-ll-58d5582fae812228", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-bubbly-597e7d9f6a0329b9", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-5accdc634261df6f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-5ad43d0e1afbc47f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-5b3ff5624d3eb4b8", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pborman-indent-5bf550ae7cdaf7b6", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-5bfe7f35ccc8f59e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-5d10b0748067dc39", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-5d1e6aff3bda7771", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-5e321fbf38d4cd6c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-5f2497f630a39a6a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-5fae9dbcdc04114f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-6217abe5cfff3196", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-64fb852e2a776700", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-659e31124494f0e5", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-65d07a903b44550b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-66ba331675153dfb", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-66d500492fae990a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-storage-6800a0a78611e519", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-otel-691dec3dfe196e5d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-6967ca0436ef8595", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rivo-uniseg-6a10ed3a5407ea69", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-6acbbcd34291f5a0", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-6e4d66dff9cf2d9c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-6e754f69326821ba", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-6ed35f21faba0716", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-7067b21e2031085a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-70ad11297dc12277", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-7137c6ccad005412", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-7163216d75ab743d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-718e7186b220be64", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-71c81822b1e9d1e5", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-72f000ad7d3513b0", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-742aca26c57f6ffe", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-75cef683cf293905", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-764fe4ba1ba5f636", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-7a1f5d0bf7bf8c77", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-7a76fa69fbaf9eb6", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-7b68ef4e752d10c2", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-iam-7bb6ec5683962a67", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dsnet-compress-7c0933ca79561f11", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sergi-go-diff-7d5e6ce92af33a4c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-agext-levenshtein-7df026d990bcdf01", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-subosito-gotenv-7f6e98c5e7aca347", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-7f789043e802f18c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-7fa5ed572fc22ee1", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-xattr-80629bae10219885", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-826ecc168d787c11", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mholt-archives-82ff43744d04ecfa", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-84665cc27ccbf4bc", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-846d9a39297aa602", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-85186a52cf720ae6", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-emirpasic-gods-85762e38c0ad17f0", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-85d3974960a67798", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cncf-xds-go-8610713f81695b9a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-pprof-89eb324efd6718f0", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go4.org-8a66e013ba4029d1", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v17-8bc5aedb13dca2d5", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-8c7c5960dfd5ea9c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-8cd26195081bd490", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-8d6dcceb945f14aa", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-8e604804d292e726", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-8f1948d2f885406f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-locker-8f5f52e9a50c87d3", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-8fa65411804d13b5", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-90185830b5e0c0f5", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-903587a948177714", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-937d2cc58490ebe0", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-93847d524504048c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-gcfg-93c4800e38e91fa0", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-9453340a6b704c4c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-memory-9716e41eb5bab06f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-986247bc6447cc68", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-9a2e4462d83b7521", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-xerrors-9b1797490b0b55b9", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-9b82ef796628d33a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-9c2c26897326f5d7", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-logger-9c3895a50ba4985a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-9c650a45f3d7108a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-signal-9cfcffeff8f34c46", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-9d3e5a3286fcad55", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-9e88b1a4cc0496bc", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-gordf-9fd0a261be0a7881", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-a0fa26ad2c1706af", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-a191a2a9c12fc345", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-a23101c329da5c9d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-a3cedba212706fc9", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-a4a57ee8c74d650f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-a4d06e781ccf2d23", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-a5465d726b15e664", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-a5c0950a359e00e4", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cel.dev-expr-a7df6a72bcffdad7", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-a88149578be772f4", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-a95e397561a70321", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-howett.net-plist-a9988714e723756d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-acbe432e88ddfc5c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-cat-aeb3a6a7bcab188f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-rpm-syft-af58e8f695eb21ff", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-b0943a26d5e47322", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-b12b030b3252b6aa", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-b23e8aab148a0f45", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-b3747ed261fa297f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-plugin-b3879231eb9b17ca", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-afero-b41944b9afb76ebf", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-b41d0231ac38fc09", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-fgprof-b5e875d79d22c9c6", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-b86e900620cd731d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-b92c735a7286cb95", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-adrg-xdg-b9498e9ef865c60f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-b96fe175a96ae97d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-b9a2cc3edeb1ad24", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-bba69ae05aa79c1e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-bc41e3495c043bce", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-bc88c25f250a186c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-bcbfbc11d6dab1a2", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-bda4c55dbbd66de7", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-bdaf5e4aaff72519", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-bfbc61b0bb4ba998", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-smithy-go-bfc935e427903ffc", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-c00d005f6322366c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-c1ba6a9628a30972", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-c28b948cf11e819c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-c49fdacec2594820", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jedib0t-go-pretty-v6-c4ef1d361a9a33bc", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-c5abb11c3ea6e681", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-mathutil-c83f1b706dc59f71", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-c897cbd00edd3fd7", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-c8db2922ad128f6e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-minio-minlz-c9891e4191aa5ace", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-cb131efbd31e0296", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-therootcompany-xz-cb2d33f009bda628", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-henvic-httpretty-cc6c6f82c426f0e1", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-piprate-json-gold-cc76c1fbdd9e54b9", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-ce2d90700744ec35", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-d178047549b53835", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-d3714791c451b517", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-d480a66d24710fb0", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-d5078ef3e2b50a6b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-scylladb-go-set-d5914170cd48c156", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-d63ace6d338894ca", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-d6fd8d45010e4846", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-d703fa66061c4460", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-d71a2ad67b06ad10", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-version-d9c3cf6e178c6af2", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-dfa9a326d7f9bcfe", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-e0ce66e7d5880f46", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-e1e12a00b785ba88", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mgutz-ansi-e2dd9bac2ba5039f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-e2fa5a5c9ba69824", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-e366299bde179411", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-e505a7135b25e9c0", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-e738f20d9fad0a4b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-e84e454b2a868689", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-e9447c4bc4db8f53", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-eb0585a27f8e84ce", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-libc-ed3192d7a1ec55a8", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-ed3caa1a3839c859", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xo-terminfo-ee420fbd0a9922d6", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-ee6a78a16d185fcb", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-ef23980a56cbac10", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-efe911257d126e00", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-eff97c3330427173", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-f0f7cb9f78d83735", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-f10e8d6aab87e61f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-f173863292b8d677", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-f1760502f86e2150", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-f1f5c037241253b5", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-f2ca3bfd8b70cc64", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-f31c9344f15e8655", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-f351e1b55d009e69", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-f469b53413ff7076", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-f4c9c88387beedc9", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-f4d69f7cc2af0ce9", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-f4eb78fa919afae8", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-f5e8e26eda472023", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-ansi-f82c9dded26171f6", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-f85c2bb7eded4d61", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-f9feb60a373f8baf", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-fa253031e042c9b3", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-groupcache-fa3f8b715c99cdc7", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-fa4417685f091bd2", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vifraa-gopom-fae08c471baae6e9", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-faf25355bb48670c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-fb9c34898325e0d1", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-fc25ff5d482eb5c7", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-fc77695bfda879ad", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-fc90a38b069ba9d9", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-clio-fde9c4a8bcada52d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tailscale-hujson-fe108b0881fc655e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-feac8b36bf25f68f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-ff454b551bdc14a9", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-cel.dev-expr-a7df6a72bcffdad7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-0727ecff2c851a26", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-f4d69f7cc2af0ce9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-93847d524504048c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-355d6bfd0cdce40f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-iam-7bb6ec5683962a67", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-45ebb7abb740ceda", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-storage-6800a0a78611e519", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-dario.cat-mergo-acbe432e88ddfc5c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-66ba331675153dfb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-70ad11297dc12277", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-DataDog-zstd-4c32d5de56bc78d8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-659e31124494f0e5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-e0ce66e7d5880f46", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-5accdc634261df6f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-578e9d996bf5d9b7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-c28b948cf11e819c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-2a0bb83b8c00d9e5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-bda4c55dbbd66de7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-090662b0e012028c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-9c650a45f3d7108a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-a4d06e781ccf2d23", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-2ca729a64708cc53", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-adrg-xdg-b9498e9ef865c60f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-agext-levenshtein-7df026d990bcdf01", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-bubbly-597e7d9f6a0329b9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-clio-fde9c4a8bcada52d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-fangs-0e3e0500596486f2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-collections-3f00d0bcf1ac6844", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-f4eb78fa919afae8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-logger-9c3895a50ba4985a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-08b82c3b61b10764", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-a191a2a9c12fc345", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-1d9880cf0dece79d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-d178047549b53835", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-sync-58c62323d4870c5e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-version-d9c3cf6e178c6af2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-846d9a39297aa602", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-1b7e34302281dc6f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1304d17efd3dc6c0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-d3714791c451b517", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-feac8b36bf25f68f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v17-8bc5aedb13dca2d5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-5d1e6aff3bda7771", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-1d50914ff96faf14", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-fc77695bfda879ad", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-01e0ca909b2fce23", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-903587a948177714", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-0c101f19e1cfa697", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-6ed35f21faba0716", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-43800e4fd0d969e7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-9453340a6b704c4c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-107318bb3567ab8d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-a88149578be772f4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-e738f20d9fad0a4b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-fb9c34898325e0d1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-937d2cc58490ebe0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-c8db2922ad128f6e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-8c7c5960dfd5ea9c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-dfa9a326d7f9bcfe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-65d07a903b44550b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-a5c0950a359e00e4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-smithy-go-bfc935e427903ffc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-b3747ed261fa297f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-9d3e5a3286fcad55", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-27ae2ddf26491e0d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bitnami-go-version-1fe4673a8e2a782b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-blakesmith-ar-21217de5f37b5515", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-5e321fbf38d4cd6c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-bfbc61b0bb4ba998", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-e1e12a00b785ba88", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bodgit-windows-16dd850e3671318b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-576798fb40e7b661", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-75cef683cf293905", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-64fb852e2a776700", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-d480a66d24710fb0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-2f4451408657c478", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-ed3caa1a3839c859", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-faf25355bb48670c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-bc88c25f250a186c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-8f1948d2f885406f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-44186e0ba7dae7bd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-ee6a78a16d185fcb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cloudflare-circl-66d500492fae990a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cncf-xds-go-8610713f81695b9a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-d6fd8d45010e4846", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-e505a7135b25e9c0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-continuity-097339753e8dc2f3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-a23101c329da5c9d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-b0943a26d5e47322", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-fifo-354ac39ddda2028c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-log-5668f2b74a2d24e9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-log-otel-691dec3dfe196e5d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-platforms-b86e900620cd731d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-plugin-b3879231eb9b17ca", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-2a27344f1065c62c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-d703fa66061c4460", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-4a015440de5fc851", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-deitch-magic-470e2ef52538f585", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-cb131efbd31e0296", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-distribution-reference-57cb16f3594bdfbf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-cli-bcbfbc11d6dab1a2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-bba69ae05aa79c1e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-connections-ef23980a56cbac10", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-units-a4a57ee8c74d650f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dsnet-compress-7c0933ca79561f11", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-fa4417685f091bd2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-c5abb11c3ea6e681", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-emirpasic-gods-85762e38c0ad17f0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-039f852a33b92d0b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-7fa5ed572fc22ee1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-85d3974960a67798", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fatih-color-00d6c54b6519ec6b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-fgprof-b5e875d79d22c9c6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-b9a2cc3edeb1ad24", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-0ef613442226576b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-8cd26195081bd490", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-3a2cdcacf1f99dbc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-git-gcfg-93c4800e38e91fa0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-fc25ff5d482eb5c7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-742aca26c57f6ffe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-c00d005f6322366c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-f1f5c037241253b5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-57551e23f2d303e8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-6217abe5cfff3196", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-8d6dcceb945f14aa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-f31c9344f15e8655", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-4602124246c7330e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-groupcache-fa3f8b715c99cdc7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-cmp-9c2c26897326f5d7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-6e754f69326821ba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-licensecheck-27d7eba06299bea6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-pprof-89eb324efd6718f0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-s2a-go-18c9902d2911a42f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-eb0585a27f8e84ce", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-1e1a7aef80a6c68c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-001bfd36625562ba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gookit-color-0e7bbefeb42117a5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-1b4366cbd170c64a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-3ab23999912b59f0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-4f81adc1b1c6d4d8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-e9447c4bc4db8f53", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-9e88b1a4cc0496bc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-72f000ad7d3513b0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-b12b030b3252b6aa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-f5e8e26eda472023", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-d5078ef3e2b50a6b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-henvic-httpretty-cc6c6f82c426f0e1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-huandu-xstrings-2595fa3f4599d6c9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-f10e8d6aab87e61f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jbenet-go-context-2b32b589248bb664", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jedib0t-go-pretty-v6-c4ef1d361a9a33bc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jinzhu-copier-1fe08547db4a53e1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-json-iterator-go-9a2e4462d83b7521", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-e366299bde179411", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-90185830b5e0c0f5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-compress-19b825adf1a22f1e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-7a76fa69fbaf9eb6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-7f789043e802f18c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-5d10b0748067dc39", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-f4c9c88387beedc9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-08cac120b1536c53", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mgutz-ansi-e2dd9bac2ba5039f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mholt-archives-82ff43744d04ecfa", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-b92c735a7286cb95", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-minio-minlz-c9891e4191aa5ace", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-f469b53413ff7076", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-9b82ef796628d33a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-42d185afd72a1a9e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-85186a52cf720ae6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-a3cedba212706fc9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-locker-8f5f52e9a50c87d3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-api-b23e8aab148a0f45", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-client-8fa65411804d13b5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-e2fa5a5c9ba69824", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-signal-9cfcffeff8f34c46", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-user-764fe4ba1ba5f636", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-userns-f2ca3bfd8b70cc64", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-5b3ff5624d3eb4b8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-b96fe175a96ae97d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-muesli-ansi-f82c9dded26171f6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-2203b39fb1ffa178", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-muesli-termenv-26f4f5efdafb23b0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-bc41e3495c043bce", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-7163216d75ab743d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-cat-aeb3a6a7bcab188f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-errors-37b4a9b80fbf352d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-ll-58d5582fae812228", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-c1ba6a9628a30972", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-2c4fa45519769b33", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-a5465d726b15e664", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-f1760502f86e2150", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pborman-indent-5bf550ae7cdaf7b6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-20d74e1f46a92a18", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-1e893dfdbe633dba", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-6acbbcd34291f5a0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-piprate-json-gold-cc76c1fbdd9e54b9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-7b68ef4e752d10c2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-errors-7a1f5d0bf7bf8c77", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-profile-3265c8d23395474f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-xattr-80629bae10219885", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-f0f7cb9f78d83735", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-ce2d90700744ec35", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-rivo-uniseg-6a10ed3a5407ea69", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-c49fdacec2594820", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-efe911257d126e00", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-saintfish-chardet-0b0a504e53e99cc9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-a95e397561a70321", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-scylladb-go-set-d5914170cd48c156", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sergi-go-diff-7d5e6ce92af33a4c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-shopspring-decimal-1f95b4c3d528e754", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-5bfe7f35ccc8f59e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-84665cc27ccbf4bc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-e84e454b2a868689", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-14e658828df95cea", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-4a03e59bfd3d6c22", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spdx-gordf-9fd0a261be0a7881", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-826ecc168d787c11", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-afero-b41944b9afb76ebf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cast-1c83651d2fde1cd3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cobra-a0fa26ad2c1706af", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-0a3e8e0000dd9d12", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-viper-02cd0675a0468b10", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-71c81822b1e9d1e5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-subosito-gotenv-7f6e98c5e7aca347", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-5611a27d7ac7474a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-bdaf5e4aaff72519", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tailscale-hujson-fe108b0881fc655e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-therootcompany-xz-cb2d33f009bda628", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-7137c6ccad005412", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-f351e1b55d009e69", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vifraa-gopom-fae08c471baae6e9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-eff97c3330427173", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-f9feb60a373f8baf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-5f2497f630a39a6a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xi2-xz-1b890aee07559a00", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xo-terminfo-ee420fbd0a9922d6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-2074b1a8f7f766d1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-zyedidia-generic-0156ecc9cdffef5e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-d63ace6d338894ca", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-7067b21e2031085a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-f173863292b8d677", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-2baae36713832565", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-4865e8a7a186d4f4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-5fae9dbcdc04114f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-6e4d66dff9cf2d9c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-16f5da1f3d279f3e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-8e604804d292e726", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-718e7186b220be64", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-go4.org-8a66e013ba4029d1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-f85c2bb7eded4d61", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-exp-269e794bd0a3225a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-mod-0451debb142001ea", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-34f8fdb7564de4bd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-oauth2-4b2002bf2b5b7a90", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-3013fe9b07e604ca", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-fa253031e042c9b3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-term-b41d0231ac38fc09", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-986247bc6447cc68", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-time-0315eefd8c898d56", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-tools-1af10d989c5fd75f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-xerrors-9b1797490b0b55b9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-api-d71a2ad67b06ad10", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-5ad43d0e1afbc47f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-6967ca0436ef8595", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-414d88058e4e800a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-ff454b551bdc14a9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-c897cbd00edd3fd7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-2aa064d6b34a524f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-howett.net-plist-a9988714e723756d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-libc-ed3192d7a1ec55a8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-mathutil-c83f1b706dc59f71", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-memory-9716e41eb5bab06f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-sqlite-06beeaae9ebf5674", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-go-module-stdlib-fc90a38b069ba9d9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-rpm-syft-af58e8f695eb21ff", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-s390x-syft", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.s390x"}, {"spdxElementId": "SPDXRef-Package-rpm-syft-43be6f4debf1d067", "relatedSpdxElement": "SPDXRef-File-...bin-syft-1.54.1-0.2.hum1.s390x.debug-a80254f4d406ad5e", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-debuginfo-1.54.1-0.2.hum1.s390x", "relatedSpdxElement": "SPDXRef-Package-rpm-syft-43be6f4debf1d067", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-syft-debuginfo-1.54.1-0.2.hum1.s390x", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-s390x-syft-debuginfo", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-syft-debuginfo-1.54.1-0.2.hum1.s390x"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-syft-debugsource-1.54.1-0.2.hum1.s390x", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-s390x-syft-debugsource", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-syft-debugsource-1.54.1-0.2.hum1.s390x"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-01504b9605007c0d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-tools-0175d87f427ffc94", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-plugin-01cc84b0330888bd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-02ae7398cc5db673", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-02c18ccc2d4e6110", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sergi-go-diff-02d239568296c21f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-minio-minlz-02e665cefe319c69", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-collections-046469abf1c7c80f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-04697fbcb672e0f6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-05d825cb1564d87f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-05f0d4116e8a78f6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-089b7118d909bf41", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-0a0c1854fbd8ef69", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-0a7444dafcf4ea2a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-0b9d8426bcab7294", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-0ca92b216f1f6b78", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-0d93a229362b9eda", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-deitch-magic-0ed253fdcdbe55e6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-0efe88a152ae4c37", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-1006e6a36d0a2e87", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fatih-color-1073229dc453c114", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-10b0bdfb6a46bdff", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-10df3b04834d39a7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xi2-xz-126d0ec70762d3cf", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-cpuid-v2-1459ff9e76727183", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-storage-1550467dc6d2776a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-167a37384a0bbe0f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-1696efa3be9ddacb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-signal-173b0cabf60477d1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-17568b4f72a6f18e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vifraa-gopom-18471579177bf3b6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-18562502915cfea5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-19e9f14715b2effb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-1a48d07c27d6a710", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-1b763b3ebabba928", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bitnami-go-version-1bf81663903fc87c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-1c98f42efe4d2d32", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jbenet-go-context-1d4b166813afe0eb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dsnet-compress-1f89a18953e266ae", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-1fe71e3c6eae09f3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-20882062b8a5cf3f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-217d87b2b0362cbc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-21ba8901b4b3966f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-222e2eecfa3e07e0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-windows-22bf17d3a5094620", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-242a3b7f04c06bb7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-clio-24676dd57a0d585a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-248bc2b7ae08132c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-howett.net-plist-248e733ec35b61ae", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-henvic-httpretty-25073e195b54bdea", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-emirpasic-gods-2524d052564fd07f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mgutz-ansi-254e4bb1d54c9538", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-264e5d68451a54b3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-27c739d965c000cc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-28a6ed012045c07b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-292370361eef1c41", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-292f6fd0a2dd7c1c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-2b19f6785a1e6670", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-libc-2b47d25b20c221af", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xo-terminfo-2c02a34295d081a5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-2c86da48836f7264", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-2ed39b3523fb55cb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-2ed853c3a86d31ac", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-2ff65b6ee65b41b4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-301ae056ce08d382", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-30c3115baa985b1e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-3144bf1e09c01b5a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-316fa69bed45d9b3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-31d983bf20213b71", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-3355b99d86d596f7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-337d966309354b2e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-memory-37ea00b64a730e48", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-39037bf0cf95d4ab", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-397da13bafd07e75", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jedib0t-go-pretty-v6-39f0ac4d73e349cf", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-huandu-xstrings-3b28c6c476ef8f12", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-3b4367cc4a18d0c4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-sync-3c950f7363536a59", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-fgprof-3e142a11a6d4e5c5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-otel-3efc23028ab9fc8a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-3f99cf4abc04658a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-3ff2f47107982428", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-continuity-402bd8d2835340a0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-ll-4038cc579593a5f3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-40bbfbd8d70e1afd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-4192f9d237f420e2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-43018e0c5ff39b59", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pborman-indent-433bffc2ad7d4631", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-xerrors-438e1125f073951e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-441bc5c375b801bd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-44c09a58618be048", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-44eeba61630e23cd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-pprof-451329184f1d8893", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-459163beba492a34", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-462ff2fc4029993e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-46a772b5dbcbb6ad", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-47864060859df34b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-ansi-478eff96e2b7d5fd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-47b0e4bc09b2ddf1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-48c7e8bf3b3cbf4f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-termenv-497e9b4f9d0b2fd7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-499e3c4e90ed5657", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-4b5de9a7480d65cb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-4b6c0ea7d8c019eb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-afero-4b78b32084b371cc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-4da06510810a7715", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-4e5de139e8e72911", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-4f08f680208cbac3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-4f153f279a8b1825", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-500dc31e5af20719", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-50455f15c0e51bee", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cncf-xds-go-507832fe9cf9235d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-52fdb67cf419b1fe", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-cat-53121fc9b09e8fbc", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-548cde168619ea5b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-579e5be41bf0f886", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-therootcompany-xz-58801f63accf687b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-59c46f7e674fca4a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-5a1c2e76f6907d33", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-5a76bb349329c2d6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-5ddaea6d3a93b909", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-5fcf7b4b89797cc4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-5ff64590d7d59405", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-piprate-json-gold-6046eb11c0667eda", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-6344be082ee6701a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-6436ff1134843f42", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-licensecheck-643a36418938422d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-6468f36605676500", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tailscale-hujson-65ccbf0d0a224519", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-69d7170b8351c1b8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v17-69ef94475b8ed8f2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-scylladb-go-set-6b4abf4f88284621", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-6bea1b7b96581b39", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-6c79abe7f569f58b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-6ca3f2752a3bcc4d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rivo-uniseg-6e8dba1cf6eaeb3e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-6f76e11564de6cdd", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gookit-color-6f817d38d6d60ec2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-6f9519a7266f461e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-70d5241abf2ce5ce", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-71c6ebfd82592d11", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-72acd93bd00372ca", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-72e2c8140e5a3258", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-76da82670a2d8bb3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zyedidia-generic-780a609c23a1c059", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-79e823d45ca44f2b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cel.dev-expr-7a956891e81421f4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-sqlite-7a9c927d41a8c117", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-7b855ff771abf9e7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-saintfish-chardet-7c402b7932dbaa9e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-7d70b1f1ebdaa59c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-7e0b04cbf57ce75e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-8053f053dd4acb7d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-819e720252113640", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-82cc85e804087bb3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-8342471fec9556d8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-83ca9e3af34ea9f3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-86ca12bbf2ca5df3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-xattr-87381442408ea2a2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-8b979a083851fc82", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-8ba49a8f434132a0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-8bd633b0527f8025", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-8cbf6fabb392a539", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-8e63cc4ad131400f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-8f3cc5baa695dfa5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-9131ee63d3a0a7a3", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-viper-913a415ef2ddb00f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-917283320d06118c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-9202fc07d91ea1a7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-92772dc5b003d856", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-93a3d42abd9a2815", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-950ccd3949f827eb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-profile-95f18f76f5c6d6e8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-968e13a87e8fb0a9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-97e7386dcec7af45", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-98b5bcbfadf3d3d6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-9a69f2b0a23c49be", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-9cc237655b2d3d2b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-9d44b87e3cb113bb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-9db9bfb13caad38a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-fangs-9e34ac80322e8501", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-9fc7c2fb18fdc306", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-a037f73a10b02379", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-a100f9a622389c9d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-a141bc7c3944d66e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-a22de2b67879157c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-a27ef10a8b175a8f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-groupcache-a29c14f6a16c5970", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-fifo-a4677bfa09097113", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-a57c1b1c226cecb7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-a66a6477613da8af", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-a7d7a6db90ad1784", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-a82ba5b47fae6476", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-a8afd296b5c71fc9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-a9927bcecd5484f7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-version-aa1cd66b250eccd1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-shopspring-decimal-aa8a6f9ee8a9de3f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-ac74e929b87d7483", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-ae589fa3203790e0", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-ae7536512e273190", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-bubbly-b1f76bab1e7f1e6e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-b23c8e0a9db0e52e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-b5cece3a35e04986", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-exp-b756c7ab8d43ba05", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-b7a9487eb7427bad", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-ba27c15a5e3c69c5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-bbab9cea6f92c435", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-bbc971f6d0d5e8c8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-bcf922b5c10fa8a9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-gordf-bdae28ed42404f52", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-subosito-gotenv-bdebd6dfca4ce5d8", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-be25bb4e99e7b50d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-beaa101cefb5d40e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-c015aff6d49b18b2", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-c0a3b5b58bfd86ec", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-c1da4bd7ca639a6b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-c3ec90b2d424d0fb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-c62c7f83e71eb3de", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-mathutil-c69b0be31f5a67ea", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-c6f95e8730302d36", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-c9fa74c81426e0a5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-ca7d31d4a5e98536", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-cce5d752cfcdf7b6", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-cdb54a0f58471d34", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-cddff3c7360d66b4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-ceec089a41be8e65", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-agext-levenshtein-d0b7355297abc602", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-d10b9c7456cb026a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-d1296477b09d32a5", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-d13ff812edd85626", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-d1e54e1446cf7ece", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-d31487e74dcda11a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-blakesmith-ar-d360511ed70a01fe", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-d890747a9226cfcb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-da797b128aad4389", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-db3b5f7f16cd9206", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go4.org-dbdea48ad491062e", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-gcfg-dcbf4a0c521d32a7", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-dcd0e334795a252c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-dd5ced448b2aed9f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-locker-de881aa2ab410278", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-df2d3e8033c38b11", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-dfccf7f33fe5f933", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-logger-e02c04b9b29ff6f9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-e07aa40c10bde55d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-e1078e337c341618", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-e17c82f4353d5a96", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-e2ca47e293c57aec", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-e365ba37fdd2386b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-e4c818714c3a087d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-e5e1d20a08e3c550", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-iam-e60458749477e2b4", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mholt-archives-e692ca1f36967d51", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-e9bd016bc652c44b", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-ea06e26d31488b3d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-ea8221d6a42ad600", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-ecada2b0c85223da", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-ece53502a88ac269", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-edd1533055ef401a", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-adrg-xdg-ee2c1c45c688ec20", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-f03f64251c78236c", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-f0ef1d76bc7a05d1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-errors-f16620d13ea59692", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-DataDog-zstd-f3733eb846fe124f", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-f4611ebae9602958", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-f5486be0b1cbf040", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-f5cd480a4bddbeda", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-f7702f4f28cd48bb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-smithy-go-f93045cfc272b637", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-fb6015f7337d56f1", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-fbe4887634fc6bfe", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-fbeb4437b8e60d6d", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-fc90a38b069ba9d9", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-fdb154c5cbe184fb", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-ff3d0bc7458ec952", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "DEPENDENCY_OF"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-01504b9605007c0d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-tools-0175d87f427ffc94", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-plugin-01cc84b0330888bd", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-02ae7398cc5db673", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-02c18ccc2d4e6110", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sergi-go-diff-02d239568296c21f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-minio-minlz-02e665cefe319c69", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-collections-046469abf1c7c80f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-04697fbcb672e0f6", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-05d825cb1564d87f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-05f0d4116e8a78f6", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-089b7118d909bf41", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-0a0c1854fbd8ef69", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-0a7444dafcf4ea2a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-0b9d8426bcab7294", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-0ca92b216f1f6b78", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-0d93a229362b9eda", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-deitch-magic-0ed253fdcdbe55e6", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-0efe88a152ae4c37", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-1006e6a36d0a2e87", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fatih-color-1073229dc453c114", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-10b0bdfb6a46bdff", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-10df3b04834d39a7", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xi2-xz-126d0ec70762d3cf", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-cpuid-v2-1459ff9e76727183", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-storage-1550467dc6d2776a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-167a37384a0bbe0f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-1696efa3be9ddacb", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-signal-173b0cabf60477d1", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-17568b4f72a6f18e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vifraa-gopom-18471579177bf3b6", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-18562502915cfea5", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-19e9f14715b2effb", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-1a48d07c27d6a710", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-1b763b3ebabba928", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bitnami-go-version-1bf81663903fc87c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-1c98f42efe4d2d32", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jbenet-go-context-1d4b166813afe0eb", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dsnet-compress-1f89a18953e266ae", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-1fe71e3c6eae09f3", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-oauth2-20882062b8a5cf3f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-217d87b2b0362cbc", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-21ba8901b4b3966f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-222e2eecfa3e07e0", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-windows-22bf17d3a5094620", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-242a3b7f04c06bb7", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-clio-24676dd57a0d585a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-248bc2b7ae08132c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-howett.net-plist-248e733ec35b61ae", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-henvic-httpretty-25073e195b54bdea", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-emirpasic-gods-2524d052564fd07f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mgutz-ansi-254e4bb1d54c9538", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-264e5d68451a54b3", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-27c739d965c000cc", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-28a6ed012045c07b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-292370361eef1c41", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-292f6fd0a2dd7c1c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cast-2b19f6785a1e6670", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-libc-2b47d25b20c221af", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xo-terminfo-2c02a34295d081a5", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-2c86da48836f7264", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-2ed39b3523fb55cb", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-2ed853c3a86d31ac", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-2ff65b6ee65b41b4", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-301ae056ce08d382", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-30c3115baa985b1e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-3144bf1e09c01b5a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-316fa69bed45d9b3", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-31d983bf20213b71", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-3355b99d86d596f7", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-337d966309354b2e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-memory-37ea00b64a730e48", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-39037bf0cf95d4ab", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-397da13bafd07e75", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jedib0t-go-pretty-v6-39f0ac4d73e349cf", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-huandu-xstrings-3b28c6c476ef8f12", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-3b4367cc4a18d0c4", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-sync-3c950f7363536a59", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-fgprof-3e142a11a6d4e5c5", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-otel-3efc23028ab9fc8a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-3f99cf4abc04658a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-3ff2f47107982428", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-continuity-402bd8d2835340a0", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-ll-4038cc579593a5f3", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-40bbfbd8d70e1afd", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-4192f9d237f420e2", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-43018e0c5ff39b59", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pborman-indent-433bffc2ad7d4631", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-xerrors-438e1125f073951e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-441bc5c375b801bd", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-44c09a58618be048", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-44eeba61630e23cd", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-pprof-451329184f1d8893", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-459163beba492a34", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-462ff2fc4029993e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-46a772b5dbcbb6ad", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-47864060859df34b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-ansi-478eff96e2b7d5fd", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-47b0e4bc09b2ddf1", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-48c7e8bf3b3cbf4f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-muesli-termenv-497e9b4f9d0b2fd7", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-499e3c4e90ed5657", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-4b5de9a7480d65cb", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-4b6c0ea7d8c019eb", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-afero-4b78b32084b371cc", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-4da06510810a7715", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-4e5de139e8e72911", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-4f08f680208cbac3", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-4f153f279a8b1825", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-500dc31e5af20719", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-50455f15c0e51bee", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cncf-xds-go-507832fe9cf9235d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-52fdb67cf419b1fe", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-cat-53121fc9b09e8fbc", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-548cde168619ea5b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-579e5be41bf0f886", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-therootcompany-xz-58801f63accf687b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-59c46f7e674fca4a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-5a1c2e76f6907d33", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-5a76bb349329c2d6", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-5ddaea6d3a93b909", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-5fcf7b4b89797cc4", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-5ff64590d7d59405", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-piprate-json-gold-6046eb11c0667eda", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-6344be082ee6701a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-6436ff1134843f42", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-licensecheck-643a36418938422d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-6468f36605676500", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-tailscale-hujson-65ccbf0d0a224519", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-s2a-go-69d7170b8351c1b8", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v17-69ef94475b8ed8f2", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-scylladb-go-set-6b4abf4f88284621", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-6bea1b7b96581b39", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-6c79abe7f569f58b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-6ca3f2752a3bcc4d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rivo-uniseg-6e8dba1cf6eaeb3e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-6f76e11564de6cdd", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gookit-color-6f817d38d6d60ec2", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-6f9519a7266f461e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-70d5241abf2ce5ce", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-71c6ebfd82592d11", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-72acd93bd00372ca", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-72e2c8140e5a3258", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-76da82670a2d8bb3", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zyedidia-generic-780a609c23a1c059", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-dario.cat-mergo-79e823d45ca44f2b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cel.dev-expr-7a956891e81421f4", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-sqlite-7a9c927d41a8c117", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-7b855ff771abf9e7", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-saintfish-chardet-7c402b7932dbaa9e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-7d70b1f1ebdaa59c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-7e0b04cbf57ce75e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-8053f053dd4acb7d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-819e720252113640", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-82cc85e804087bb3", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-8342471fec9556d8", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-api-83ca9e3af34ea9f3", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-86ca12bbf2ca5df3", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-xattr-87381442408ea2a2", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-8b979a083851fc82", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-8ba49a8f434132a0", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-8bd633b0527f8025", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-8cbf6fabb392a539", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-8e63cc4ad131400f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-8f3cc5baa695dfa5", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-9131ee63d3a0a7a3", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-viper-913a415ef2ddb00f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-917283320d06118c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-9202fc07d91ea1a7", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-92772dc5b003d856", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-93a3d42abd9a2815", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-950ccd3949f827eb", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-profile-95f18f76f5c6d6e8", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-968e13a87e8fb0a9", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-97e7386dcec7af45", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-98b5bcbfadf3d3d6", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-jinzhu-copier-9a69f2b0a23c49be", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-9cc237655b2d3d2b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-9d44b87e3cb113bb", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-9db9bfb13caad38a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-fangs-9e34ac80322e8501", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-9fc7c2fb18fdc306", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-a037f73a10b02379", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-a100f9a622389c9d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-a141bc7c3944d66e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-a22de2b67879157c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-a27ef10a8b175a8f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-golang-groupcache-a29c14f6a16c5970", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-fifo-a4677bfa09097113", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-a57c1b1c226cecb7", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-a66a6477613da8af", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-a7d7a6db90ad1784", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-json-iterator-go-a82ba5b47fae6476", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-cloudflare-circl-a8afd296b5c71fc9", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-a9927bcecd5484f7", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-version-aa1cd66b250eccd1", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-shopspring-decimal-aa8a6f9ee8a9de3f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-ac74e929b87d7483", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-ae589fa3203790e0", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-ae7536512e273190", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-bubbly-b1f76bab1e7f1e6e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-b23c8e0a9db0e52e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-rpm-syft-b4849e9e703de1da", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-b5cece3a35e04986", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-exp-b756c7ab8d43ba05", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-b7a9487eb7427bad", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-ba27c15a5e3c69c5", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-bbab9cea6f92c435", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-bbc971f6d0d5e8c8", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-bcf922b5c10fa8a9", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spdx-gordf-bdae28ed42404f52", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-subosito-gotenv-bdebd6dfca4ce5d8", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-be25bb4e99e7b50d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-auth-beaa101cefb5d40e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-c015aff6d49b18b2", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-c0a3b5b58bfd86ec", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-c1da4bd7ca639a6b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-c3ec90b2d424d0fb", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-c62c7f83e71eb3de", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-modernc.org-mathutil-c69b0be31f5a67ea", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-c6f95e8730302d36", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-mod-c9fa74c81426e0a5", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-ca7d31d4a5e98536", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-cce5d752cfcdf7b6", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-cdb54a0f58471d34", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-cddff3c7360d66b4", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-ceec089a41be8e65", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-agext-levenshtein-d0b7355297abc602", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-d10b9c7456cb026a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-d1296477b09d32a5", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-d13ff812edd85626", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-d1e54e1446cf7ece", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-d31487e74dcda11a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-blakesmith-ar-d360511ed70a01fe", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-d890747a9226cfcb", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-da797b128aad4389", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-db3b5f7f16cd9206", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go4.org-dbdea48ad491062e", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-git-gcfg-dcbf4a0c521d32a7", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-dcd0e334795a252c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-dd5ced448b2aed9f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-locker-de881aa2ab410278", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-df2d3e8033c38b11", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-dfccf7f33fe5f933", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-logger-e02c04b9b29ff6f9", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-e07aa40c10bde55d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-e1078e337c341618", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-e17c82f4353d5a96", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-e2ca47e293c57aec", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-e365ba37fdd2386b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-e4c818714c3a087d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-e5e1d20a08e3c550", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-cloud.google.com-go-iam-e60458749477e2b4", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mholt-archives-e692ca1f36967d51", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-e9bd016bc652c44b", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-ea06e26d31488b3d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-ea8221d6a42ad600", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-ecada2b0c85223da", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-ece53502a88ac269", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-edd1533055ef401a", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-adrg-xdg-ee2c1c45c688ec20", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-f03f64251c78236c", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-f0ef1d76bc7a05d1", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-olekukonko-errors-f16620d13ea59692", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-DataDog-zstd-f3733eb846fe124f", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-f4611ebae9602958", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-f5486be0b1cbf040", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-f5cd480a4bddbeda", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-f7702f4f28cd48bb", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-aws-smithy-go-f93045cfc272b637", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-fb6015f7337d56f1", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-fbe4887634fc6bfe", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-fbeb4437b8e60d6d", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-stdlib-fc90a38b069ba9d9", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-fdb154c5cbe184fb", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-ff3d0bc7458ec952", "relatedSpdxElement": "SPDXRef-File-usr-bin-syft-381e52f3ceee0728", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-cel.dev-expr-7a956891e81421f4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-441bc5c375b801bd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-beaa101cefb5d40e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-auth-oauth2adapt-19e9f14715b2effb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-compute-metadata-ae589fa3203790e0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-iam-e60458749477e2b4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-monitoring-e4c818714c3a087d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-cloud.google.com-go-storage-1550467dc6d2776a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-dario.cat-mergo-79e823d45ca44f2b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-BurntSushi-toml-6468f36605676500", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-CycloneDX-cyclonedx-go-cdb54a0f58471d34", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-DataDog-zstd-f3733eb846fe124f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-59c46f7e674fca4a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-exporter-metric-d1296477b09d32a5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-GoogleCloudPlatform-opentelemetry-operations-go-internal-resourcemapping-222e2eecfa3e07e0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-goutils-917283320d06118c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-semver-v3-5a1c2e76f6907d33", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-Masterminds-sprig-v3-d1e54e1446cf7ece", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-OneOfOne-xxhash-c0a3b5b58bfd86ec", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ProtonMail-go-crypto-8e63cc4ad131400f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-STARRY-S-zip-292370361eef1c41", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-8342471fec9556d8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acobaugh-osrelease-819e720252113640", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-adrg-xdg-ee2c1c45c688ec20", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-agext-levenshtein-d0b7355297abc602", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-bubbly-b1f76bab1e7f1e6e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-clio-24676dd57a0d585a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-fangs-9e34ac80322e8501", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-collections-046469abf1c7c80f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-homedir-fdb154c5cbe184fb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-logger-e02c04b9b29ff6f9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-lzo-264e5d68451a54b3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-macholibre-0d93a229362b9eda", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-rpmdb-b23c8e0a9db0e52e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-struct-converter-fbe4887634fc6bfe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-sync-3c950f7363536a59", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-go-version-aa1cd66b250eccd1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-packageurl-go-44eeba61630e23cd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-stereoscope-a22de2b67879157c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-anchore-syft-1b83ad4f5ee10b3b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-andybalholm-brotli-e5e1d20a08e3c550", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v15-0b9d8426bcab7294", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-apparentlymart-go-textseg-v17-69ef94475b8ed8f2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aquasecurity-go-pep440-version-30c3115baa985b1e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aquasecurity-go-version-a66a6477613da8af", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-52fdb67cf419b1fe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-aws-protocol-eventstream-a7d7a6db90ad1784", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-config-9202fc07d91ea1a7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-credentials-bbc971f6d0d5e8c8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-feature-ec2-imds-8053f053dd4acb7d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-configsources-e1078e337c341618", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-endpoints-v2-4f08f680208cbac3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-internal-v4a-72acd93bd00372ca", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-accept-encoding-28a6ed012045c07b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-checksum-2ff65b6ee65b41b4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-presigned-url-f5cd480a4bddbeda", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-internal-s3shared-02ae7398cc5db673", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-s3-ceec089a41be8e65", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-signin-c3ec90b2d424d0fb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sso-5ddaea6d3a93b909", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-ssooidc-cddff3c7360d66b4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-aws-sdk-go-v2-service-sts-a27ef10a8b175a8f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aws-smithy-go-f93045cfc272b637", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-aymanbagabas-go-osc52-v2-3b4367cc4a18d0c4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-becheran-wildmatch-go-d13ff812edd85626", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bgentry-go-netrc-9db9bfb13caad38a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bitnami-go-version-1bf81663903fc87c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-blakesmith-ar-d360511ed70a01fe", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bmatcuk-doublestar-v4-39037bf0cf95d4ab", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bodgit-plumbing-1fe71e3c6eae09f3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bodgit-sevenzip-86ca12bbf2ca5df3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-bodgit-windows-22bf17d3a5094620", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-3f99cf4abc04658a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbles-a141bc7c3944d66e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-bubbletea-2ed39b3523fb55cb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-colorprofile-316fa69bed45d9b3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-harmonica-9cc237655b2d3d2b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-lipgloss-4192f9d237f420e2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-x-ansi-950ccd3949f827eb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-x-cellbuf-499e3c4e90ed5657", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-charmbracelet-x-term-1b763b3ebabba928", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-displaywidth-337d966309354b2e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-27c739d965c000cc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cloudflare-circl-a8afd296b5c71fc9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cncf-xds-go-507832fe9cf9235d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-46a772b5dbcbb6ad", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-3355b99d86d596f7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-continuity-402bd8d2835340a0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-3144bf1e09c01b5a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-71c6ebfd82592d11", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-fifo-a4677bfa09097113", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-log-05f0d4116e8a78f6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-log-otel-3efc23028ab9fc8a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-platforms-e17c82f4353d5a96", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-plugin-01cc84b0330888bd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-9131ee63d3a0a7a3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-d890747a9226cfcb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cyphar-filepath-securejoin-579e5be41bf0f886", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-deitch-magic-0ed253fdcdbe55e6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-diskfs-go-diskfs-fbeb4437b8e60d6d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-distribution-reference-44c09a58618be048", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-cli-6ca3f2752a3bcc4d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-ece53502a88ac269", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-connections-e365ba37fdd2386b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-units-8ba49a8f434132a0", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dsnet-compress-1f89a18953e266ae", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-dustin-go-humanize-4e5de139e8e72911", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-elliotchance-phpserialize-ff3d0bc7458ec952", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-emirpasic-gods-2524d052564fd07f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-envoyproxy-go-control-plane-envoy-e2ca47e293c57aec", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-envoyproxy-protoc-gen-validate-d10b9c7456cb026a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-facebookincubator-nvdtools-242a3b7f04c06bb7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fatih-color-1073229dc453c114", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-fgprof-3e142a11a6d4e5c5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-10df3b04834d39a7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fsnotify-fsnotify-dcd0e334795a252c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gabriel-vasile-mimetype-4b5de9a7480d65cb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-github-go-spdx-v2-ac74e929b87d7483", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-git-gcfg-dcbf4a0c521d32a7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-git-go-billy-v5-5fcf7b4b89797cc4", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-git-go-git-v5-6f76e11564de6cdd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-jose-go-jose-v4-7b855ff771abf9e7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-6436ff1134843f42", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-dfccf7f33fe5f933", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-restruct-restruct-0a0c1854fbd8ef69", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-b7a9487eb7427bad", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-goccy-go-yaml-462ff2fc4029993e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gohugoio-hashstructure-8cbf6fabb392a539", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-groupcache-a29c14f6a16c5970", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-cmp-f4611ebae9602958", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-containerregistry-01504b9605007c0d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-licensecheck-643a36418938422d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-pprof-451329184f1d8893", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-s2a-go-69d7170b8351c1b8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-397da13bafd07e75", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-enterprise-certificate-proxy-548cde168619ea5b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-googleapis-gax-go-v2-43018e0c5ff39b59", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gookit-color-6f817d38d6d60ec2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gpustack-gguf-parser-go-fb6015f7337d56f1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-aws-sdk-go-base-v2-21ba8901b4b3966f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-05d825cb1564d87f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-459163beba492a34", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-getter-a9927bcecd5484f7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-4b6c0ea7d8c019eb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-bcf922b5c10fa8a9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-golang-lru-v2-72e2c8140e5a3258", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-hcl-v2-1a48d07c27d6a710", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-henvic-httpretty-25073e195b54bdea", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-huandu-xstrings-3b28c6c476ef8f12", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-iancoleman-strcase-f5486be0b1cbf040", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jbenet-go-context-1d4b166813afe0eb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jedib0t-go-pretty-v6-39f0ac4d73e349cf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jinzhu-copier-9a69f2b0a23c49be", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-json-iterator-go-a82ba5b47fae6476", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kastenhq-goversion-cce5d752cfcdf7b6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kevinburke-ssh-config-70d5241abf2ce5ce", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-compress-18562502915cfea5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-cpuid-v2-1459ff9e76727183", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-pgzip-93a3d42abd9a2815", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-lucasb-eyer-go-colorful-10b0bdfb6a46bdff", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-17568b4f72a6f18e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-04697fbcb672e0f6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-217d87b2b0362cbc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mgutz-ansi-254e4bb1d54c9538", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mholt-archives-e692ca1f36967d51", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mikelolasagasti-xz-5a76bb349329c2d6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-minio-minlz-02e665cefe319c69", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-copystructure-5ff64590d7d59405", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-go-homedir-4f153f279a8b1825", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-go-wordwrap-be25bb4e99e7b50d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-reflectwalk-ea06e26d31488b3d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-0a7444dafcf4ea2a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-locker-de881aa2ab410278", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-api-50455f15c0e51bee", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-client-8b979a083851fc82", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-mountinfo-76da82670a2d8bb3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-signal-173b0cabf60477d1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-user-ba27c15a5e3c69c5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-userns-e9bd016bc652c44b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-concurrent-c1da4bd7ca639a6b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-modern-go-reflect2-7e0b04cbf57ce75e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-muesli-ansi-478eff96e2b7d5fd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-muesli-cancelreader-1696efa3be9ddacb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-muesli-termenv-497e9b4f9d0b2fd7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-nix-community-go-nix-a100f9a622389c9d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-nwaples-rardecode-v2-edd1533055ef401a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-cat-53121fc9b09e8fbc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-errors-f16620d13ea59692", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-ll-4038cc579593a5f3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-olekukonko-tablewriter-bbab9cea6f92c435", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-7d70b1f1ebdaa59c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-47864060859df34b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-runtime-spec-6c79abe7f569f58b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pborman-indent-433bffc2ad7d4631", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-48c7e8bf3b3cbf4f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-31d983bf20213b71", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pierrec-lz4-v4-1006e6a36d0a2e87", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-piprate-json-gold-6046eb11c0667eda", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pjbgf-sha1cd-97e7386dcec7af45", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-errors-2ed853c3a86d31ac", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-profile-95f18f76f5c6d6e8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-xattr-87381442408ea2a2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pquerna-cachecontrol-6344be082ee6701a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-remyoudompheng-bigfft-301ae056ce08d382", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-rivo-uniseg-6e8dba1cf6eaeb3e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-rust-secure-code-go-rustaudit-dd5ced448b2aed9f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sagikazarmark-locafero-9d44b87e3cb113bb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-saintfish-chardet-7c402b7932dbaa9e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sassoftware-go-rpmutils-b5cece3a35e04986", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-scylladb-go-set-6b4abf4f88284621", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sergi-go-diff-02d239568296c21f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-shopspring-decimal-aa8a6f9ee8a9de3f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-df2d3e8033c38b11", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-skeema-knownhosts-f7702f4f28cd48bb", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-smallnest-ringbuffer-c015aff6d49b18b2", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sorairolake-lzip-go-968e13a87e8fb0a9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sourcegraph-conc-47b0e4bc09b2ddf1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spdx-gordf-bdae28ed42404f52", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spdx-tools-golang-9fc7c2fb18fdc306", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-afero-4b78b32084b371cc", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cast-2b19f6785a1e6670", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cobra-ae7536512e273190", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-da797b128aad4389", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-viper-913a415ef2ddb00f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spiffe-go-spiffe-v2-db3b5f7f16cd9206", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-subosito-gotenv-bdebd6dfca4ce5d8", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sylabs-sif-v2-e07aa40c10bde55d", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sylabs-squashfs-6f9519a7266f461e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tailscale-hujson-65ccbf0d0a224519", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-therootcompany-xz-58801f63accf687b", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-ulikunitz-xz-089b7118d909bf41", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vbatts-go-mtree-ca7d31d4a5e98536", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-vifraa-gopom-18471579177bf3b6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-wagoodman-go-partybus-248bc2b7ae08132c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-wagoodman-go-progress-f03f64251c78236c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xanzy-ssh-agent-4da06510810a7715", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xi2-xz-126d0ec70762d3cf", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xo-terminfo-2c02a34295d081a5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-zclconf-go-cty-98b5bcbfadf3d3d6", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-zyedidia-generic-780a609c23a1c059", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-f0ef1d76bc7a05d1", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-detectors-gcp-8f3cc5baa695dfa5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-292f6fd0a2dd7c1c", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-c6f95e8730302d36", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-0efe88a152ae4c37", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-02c18ccc2d4e6110", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-167a37384a0bbe0f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-40bbfbd8d70e1afd", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-500dc31e5af20719", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v3-a57c1b1c226cecb7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-go4.org-dbdea48ad491062e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-ecada2b0c85223da", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-exp-b756c7ab8d43ba05", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-mod-c9fa74c81426e0a5", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-1c98f42efe4d2d32", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-oauth2-20882062b8a5cf3f", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-8bd633b0527f8025", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-2c86da48836f7264", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-term-d31487e74dcda11a", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-82cc85e804087bb3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-time-a037f73a10b02379", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-tools-0175d87f427ffc94", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-xerrors-438e1125f073951e", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-api-83ca9e3af34ea9f3", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-ea8221d6a42ad600", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-c62c7f83e71eb3de", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-6bea1b7b96581b39", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-92772dc5b003d856", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-3ff2f47107982428", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-warnings.v0-0ca92b216f1f6b78", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-howett.net-plist-248e733ec35b61ae", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-libc-2b47d25b20c221af", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-mathutil-c69b0be31f5a67ea", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-memory-37ea00b64a730e48", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-modernc.org-sqlite-7a9c927d41a8c117", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-go-module-stdlib-fc90a38b069ba9d9", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-rpm-syft-b4849e9e703de1da", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-x86-64-syft", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-syft-1.54.1-0.2.hum1.x86-64"}, {"spdxElementId": "SPDXRef-Package-rpm-syft-7eba458fb166acb7", "relatedSpdxElement": "SPDXRef-File-...bin-syft-1.54.1-0.2.hum1.x86-64.debug-dc400c1086c82289", "relationshipType": "OTHER", "comment": "evident-by: indicates the package's existence is evident by the given file"}, {"spdxElementId": "SPDXRef-Directory-Root-syft-debuginfo-1.54.1-0.2.hum1.x86-64", "relatedSpdxElement": "SPDXRef-Package-rpm-syft-7eba458fb166acb7", "relationshipType": "CONTAINS"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-syft-debuginfo-1.54.1-0.2.hum1.x86-64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-x86-64-syft-debuginfo", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-syft-debuginfo-1.54.1-0.2.hum1.x86-64"}, {"spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-Directory-Root-syft-debugsource-1.54.1-0.2.hum1.x86-64", "relationshipType": "DESCRIBES"}, {"spdxElementId": "SPDXRef-x86-64-syft-debugsource", "relationshipType": "CONTAINS", "relatedSpdxElement": "SPDXRef-Directory-Root-syft-debugsource-1.54.1-0.2.hum1.x86-64"}], "documentDescribes": ["SPDXRef-SRPM", "SPDXRef-aarch64-syft", "SPDXRef-s390x-syft", "SPDXRef-x86-64-syft", "SPDXRef-aarch64-syft-debuginfo", "SPDXRef-s390x-syft-debuginfo", "SPDXRef-x86-64-syft-debuginfo", "SPDXRef-aarch64-syft-debugsource", "SPDXRef-s390x-syft-debugsource", "SPDXRef-x86-64-syft-debugsource"]}