{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.google/go-github","documentNamespace":"https://spdx.org/spdxdocs/protobom/b3771cf3-4722-411a-8562-b054d0e31703","creationInfo":{"creators":["Tool: protobom-v0.0.0-20250407164628-01a4a61d0bed+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2025-04-10T09:59:02Z"},"packages":[{"name":"github.com/ProtonMail/go-crypto","SPDXID":"SPDXRef-golang-github.comprotonmail-go-crypto-0.0.0-20230828082145-3c4c8a2d2371-75c946","versionInfo":"0.0.0-20230828082145-3c4c8a2d2371","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/protonmail/go-crypto@0.0.0-20230828082145-3c4c8a2d2371"}]},{"name":"github.com/theupdateframework/go-tuf/v2","SPDXID":"SPDXRef-golang-github.comtheupdateframeworkgo-tuf-v2-2.0.1-75c946","versionInfo":"2.0.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/theupdateframework/go-tuf/v2@2.0.1"}]},{"name":"k8s.io/klog/v2","SPDXID":"SPDXRef-golang-k8s.ioklog-v2-2.120.1-75c946","versionInfo":"2.120.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/k8s.io/klog/v2@2.120.1"}]},{"name":"github.com/golang/protobuf","SPDXID":"SPDXRef-golang-github.comgolang-protobuf-1.5.4-75c946","versionInfo":"1.5.4","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/golang/protobuf@1.5.4"}]},{"name":"golang.org/x/text","SPDXID":"SPDXRef-golang-golang.orgx-text-0.22.0-75c946","versionInfo":"0.22.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/golang.org/x/text@0.22.0"}]},{"name":"github.com/getkin/kin-openapi","SPDXID":"SPDXRef-golang-github.comgetkin-kin-openapi-0.131.0-75c946","versionInfo":"0.131.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/getkin/kin-openapi@0.131.0"}]},{"name":"github.com/titanous/rocacheck","SPDXID":"SPDXRef-golang-github.comtitanous-rocacheck-0.0.0-20171023193734-afe73141d399-75c946","versionInfo":"0.0.0-20171023193734-afe73141d399","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/titanous/rocacheck@0.0.0-20171023193734-afe73141d399"}]},{"name":"github.com/go-chi/chi","SPDXID":"SPDXRef-golang-github.comgo-chi-chi-4.1.2incompatible-75c946","versionInfo":"4.1.2+incompatible","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/go-chi/chi@4.1.2%2Bincompatible"}]},{"name":"github.com/theupdateframework/go-tuf","SPDXID":"SPDXRef-golang-github.comtheupdateframework-go-tuf-0.7.0-75c946","versionInfo":"0.7.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/theupdateframework/go-tuf@0.7.0"}]},{"name":"github.com/go-openapi/loads","SPDXID":"SPDXRef-golang-github.comgo-openapi-loads-0.22.0-75c946","versionInfo":"0.22.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/go-openapi/loads@0.22.0"}]},{"name":"github.com/google/go-github/v37","SPDXID":"SPDXRef-golang-github.comgooglego-github-v37-37.0.0-75c946","versionInfo":"37.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/google/go-github/v37@37.0.0"}]},{"name":"github.com/xlzd/gotp","SPDXID":"SPDXRef-golang-github.comxlzd-gotp-0.0.0-20181030022105-c8557ba2c119-75c946","versionInfo":"0.0.0-20181030022105-c8557ba2c119","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/xlzd/gotp@0.0.0-20181030022105-c8557ba2c119"}]},{"name":"github.com/mitchellh/mapstructure","SPDXID":"SPDXRef-golang-github.commitchellh-mapstructure-1.5.0-75c946","versionInfo":"1.5.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/mitchellh/mapstructure@1.5.0"}]},{"name":"github.com/digitorus/pkcs7","SPDXID":"SPDXRef-golang-github.comdigitorus-pkcs7-0.0.0-20230818184609-3a137a874352-75c946","versionInfo":"0.0.0-20230818184609-3a137a874352","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/digitorus/pkcs7@0.0.0-20230818184609-3a137a874352"}]},{"name":"go.mongodb.org/mongo-driver","SPDXID":"SPDXRef-golang-go.mongodb.org-mongo-driver-1.14.0-75c946","versionInfo":"1.14.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/go.mongodb.org/mongo-driver@1.14.0"}]},{"name":"github.com/sigstore/rekor","SPDXID":"SPDXRef-golang-github.comsigstore-rekor-1.3.6-75c946","versionInfo":"1.3.6","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/sigstore/rekor@1.3.6"}]},{"name":"github.com/google/go-containerregistry","SPDXID":"SPDXRef-golang-github.comgoogle-go-containerregistry-0.20.2-75c946","versionInfo":"0.20.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/google/go-containerregistry@0.20.2"}]},{"name":"github.com/sigstore/sigstore-go","SPDXID":"SPDXRef-golang-github.comsigstore-sigstore-go-0.6.1-75c946","versionInfo":"0.6.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/sigstore/sigstore-go@0.6.1"}]},{"name":"github.com/GoKillers/libsodium-go","SPDXID":"SPDXRef-golang-github.comgokillers-libsodium-go-0.0.0-20171022220152-dd733721c3cb-75c946","versionInfo":"0.0.0-20171022220152-dd733721c3cb","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/gokillers/libsodium-go@0.0.0-20171022220152-dd733721c3cb"}]},{"name":"github.com/google/go-github/v41","SPDXID":"SPDXRef-golang-github.comgooglego-github-v41-41.0.0-75c946","versionInfo":"41.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/google/go-github/v41@41.0.0"}]},{"name":"github.com/go-logr/stdr","SPDXID":"SPDXRef-golang-github.comgo-logr-stdr-1.2.2-75c946","versionInfo":"1.2.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/go-logr/stdr@1.2.2"}]},{"name":"github.com/fsnotify/fsnotify","SPDXID":"SPDXRef-golang-github.comfsnotify-fsnotify-1.7.0-75c946","versionInfo":"1.7.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/fsnotify/fsnotify@1.7.0"}]},{"name":"github.com/transparency-dev/merkle","SPDXID":"SPDXRef-golang-github.comtransparency-dev-merkle-0.0.2-75c946","versionInfo":"0.0.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/transparency-dev/merkle@0.0.2"}]},{"name":"github.com/go-openapi/spec","SPDXID":"SPDXRef-golang-github.comgo-openapi-spec-0.21.0-75c946","versionInfo":"0.21.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/go-openapi/spec@0.21.0"}]},{"name":"golang.org/x/crypto","SPDXID":"SPDXRef-golang-golang.orgx-crypto-0.35.0-75c946","versionInfo":"0.35.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/golang.org/x/crypto@0.35.0"}]},{"name":"github.com/sigstore/timestamp-authority","SPDXID":"SPDXRef-golang-github.comsigstore-timestamp-authority-1.2.2-75c946","versionInfo":"1.2.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/sigstore/timestamp-authority@1.2.2"}]},{"name":"github.com/google/go-cmp","SPDXID":"SPDXRef-golang-github.comgoogle-go-cmp-0.7.0-75c946","versionInfo":"0.7.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/google/go-cmp@0.7.0"}]},{"name":"github.com/spf13/pflag","SPDXID":"SPDXRef-golang-github.comspf13-pflag-1.0.5-75c946","versionInfo":"1.0.5","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/spf13/pflag@1.0.5"}]},{"name":"github.com/josharian/intern","SPDXID":"SPDXRef-golang-github.comjosharian-intern-1.0.0-75c946","versionInfo":"1.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/josharian/intern@1.0.0"}]},{"name":"github.com/pkg/errors","SPDXID":"SPDXRef-golang-github.compkg-errors-0.9.1-75c946","versionInfo":"0.9.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/pkg/errors@0.9.1"}]},{"name":"github.com/go-logr/logr","SPDXID":"SPDXRef-golang-github.comgo-logr-logr-1.4.1-75c946","versionInfo":"1.4.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/go-logr/logr@1.4.1"}]},{"name":"gopkg.in/yaml.v2","SPDXID":"SPDXRef-golang-gopkg.in-yaml.v2-2.3.0-75c946","versionInfo":"2.3.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/gopkg.in/yaml.v2@2.3.0"}]},{"name":"github.com/mohae/deepcopy","SPDXID":"SPDXRef-golang-github.commohae-deepcopy-0.0.0-20170929034955-c48cc78d4826-75c946","versionInfo":"0.0.0-20170929034955-c48cc78d4826","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/mohae/deepcopy@0.0.0-20170929034955-c48cc78d4826"}]},{"name":"golang.org/x/mod","SPDXID":"SPDXRef-golang-golang.orgx-mod-0.20.0-75c946","versionInfo":"0.20.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/golang.org/x/mod@0.20.0"}]},{"name":"github.com/oasdiff/yaml","SPDXID":"SPDXRef-golang-github.comoasdiff-yaml-0.0.0-20250309154309-f31be36b4037-75c946","versionInfo":"0.0.0-20250309154309-f31be36b4037","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/oasdiff/yaml@0.0.0-20250309154309-f31be36b4037"}]},{"name":"github.com/sagikazarmark/slog-shim","SPDXID":"SPDXRef-golang-github.comsagikazarmark-slog-shim-0.1.0-75c946","versionInfo":"0.1.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/sagikazarmark/slog-shim@0.1.0"}]},{"name":"google.golang.org/protobuf","SPDXID":"SPDXRef-golang-google.golang.org-protobuf-1.34.2-75c946","versionInfo":"1.34.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/google.golang.org/protobuf@1.34.2"}]},{"name":"golang.org/x/net","SPDXID":"SPDXRef-golang-golang.orgx-net-0.36.0-75c946","versionInfo":"0.36.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/golang.org/x/net@0.36.0"}]},{"name":"github.com/sourcegraph/conc","SPDXID":"SPDXRef-golang-github.comsourcegraph-conc-0.3.0-75c946","versionInfo":"0.3.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/sourcegraph/conc@0.3.0"}]},{"name":"golang.org/x/exp","SPDXID":"SPDXRef-golang-golang.orgx-exp-0.0.0-20240112132812-db7319d0e0e3-75c946","versionInfo":"0.0.0-20240112132812-db7319d0e0e3","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/golang.org/x/exp@0.0.0-20240112132812-db7319d0e0e3"}]},{"name":"github.com/sigstore/protobuf-specs","SPDXID":"SPDXRef-golang-github.comsigstore-protobuf-specs-0.3.2-75c946","versionInfo":"0.3.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/sigstore/protobuf-specs@0.3.2"}]},{"name":"github.com/in-toto/attestation","SPDXID":"SPDXRef-golang-github.comin-toto-attestation-1.1.0-75c946","versionInfo":"1.1.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/in-toto/attestation@1.1.0"}]},{"name":"actions/setup-go","SPDXID":"SPDXRef-githubactions-actions-setup-go-0aaccfd150d50ccaeb58ebd88d36e91967a5f35b-75c946","versionInfo":"0aaccfd150d50ccaeb58ebd88d36e91967a5f35b","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b"}]},{"name":"github.com/go-openapi/strfmt","SPDXID":"SPDXRef-golang-github.comgo-openapi-strfmt-0.23.0-75c946","versionInfo":"0.23.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/go-openapi/strfmt@0.23.0"}]},{"name":"go.opentelemetry.io/otel/metric","SPDXID":"SPDXRef-golang-go.opentelemetry.iootel-metric-1.27.0-75c946","versionInfo":"1.27.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/go.opentelemetry.io/otel/metric@1.27.0"}]},{"name":"github.com/google/go-github/v32","SPDXID":"SPDXRef-golang-github.comgooglego-github-v32-32.1.0-75c946","versionInfo":"32.1.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/google/go-github/v32@32.1.0"}]},{"name":"github.com/go-test/deep","SPDXID":"SPDXRef-golang-github.comgo-test-deep-1.1.1-75c946","versionInfo":"1.1.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/go-test/deep@1.1.1"}]},{"name":"github.com/mailru/easyjson","SPDXID":"SPDXRef-golang-github.commailru-easyjson-0.7.7-75c946","versionInfo":"0.7.7","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/mailru/easyjson@0.7.7"}]},{"name":"github.com/hashicorp/hcl","SPDXID":"SPDXRef-golang-github.comhashicorp-hcl-1.0.0-75c946","versionInfo":"1.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/hashicorp/hcl@1.0.0"}]},{"name":"github.com/in-toto/in-toto-golang","SPDXID":"SPDXRef-golang-github.comin-toto-in-toto-golang-0.9.0-75c946","versionInfo":"0.9.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/in-toto/in-toto-golang@0.9.0"}]},{"name":"github.com/go-openapi/analysis","SPDXID":"SPDXRef-golang-github.comgo-openapi-analysis-0.23.0-75c946","versionInfo":"0.23.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/go-openapi/analysis@0.23.0"}]},{"name":"golang.org/x/net","SPDXID":"SPDXRef-golang-golang.orgx-net-0.0.0-20191014212845-da9a3fd4c582-75c946","versionInfo":"0.0.0-20191014212845-da9a3fd4c582","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/golang.org/x/net@0.0.0-20191014212845-da9a3fd4c582"}]},{"name":"github.com/oasdiff/yaml3","SPDXID":"SPDXRef-golang-github.comoasdiff-yaml3-0.0.0-20250309153720-d2182401db90-75c946","versionInfo":"0.0.0-20250309153720-d2182401db90","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/oasdiff/yaml3@0.0.0-20250309153720-d2182401db90"}]},{"name":"github.com/bradleyfalzon/ghinstallation/v2","SPDXID":"SPDXRef-golang-github.combradleyfalzonghinstallation-v2-2.0.4-75c946","versionInfo":"2.0.4","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/bradleyfalzon/ghinstallation/v2@2.0.4"}]},{"name":"golang.org/x/mod","SPDXID":"SPDXRef-golang-golang.orgx-mod-0.22.0-75c946","versionInfo":"0.22.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/golang.org/x/mod@0.22.0"}]},{"name":"github.com/pmezard/go-difflib","SPDXID":"SPDXRef-golang-github.compmezard-go-difflib-1.0.0-75c946","versionInfo":"1.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/pmezard/go-difflib@1.0.0"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-11bd71901bbe5b1630ceea73d27597364c9af683-75c946","versionInfo":"11bd71901bbe5b1630ceea73d27597364c9af683","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683"}]},{"name":"github.com/go-openapi/errors","SPDXID":"SPDXRef-golang-github.comgo-openapi-errors-0.22.0-75c946","versionInfo":"0.22.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/go-openapi/errors@0.22.0"}]},{"name":"golang.org/x/sync","SPDXID":"SPDXRef-golang-golang.orgx-sync-0.11.0-75c946","versionInfo":"0.11.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/golang.org/x/sync@0.11.0"}]},{"name":"github.com/sassoftware/relic","SPDXID":"SPDXRef-golang-github.comsassoftware-relic-7.2.1incompatible-75c946","versionInfo":"7.2.1+incompatible","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/sassoftware/relic@7.2.1%2Bincompatible"}]},{"name":"github.com/hashicorp/go-retryablehttp","SPDXID":"SPDXRef-golang-github.comhashicorp-go-retryablehttp-0.7.7-75c946","versionInfo":"0.7.7","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/hashicorp/go-retryablehttp@0.7.7"}]},{"name":"gopkg.in/yaml.v3","SPDXID":"SPDXRef-golang-gopkg.in-yaml.v3-3.0.1-75c946","versionInfo":"3.0.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/gopkg.in/yaml.v3@3.0.1"}]},{"name":"github.com/asaskevich/govalidator","SPDXID":"SPDXRef-golang-github.comasaskevich-govalidator-0.0.0-20230301143203-a9d515a09cc2-75c946","versionInfo":"0.0.0-20230301143203-a9d515a09cc2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/asaskevich/govalidator@0.0.0-20230301143203-a9d515a09cc2"}]},{"name":"github.com/gofri/go-github-pagination","SPDXID":"SPDXRef-golang-github.comgofri-go-github-pagination-1.0.0-75c946","versionInfo":"1.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/gofri/go-github-pagination@1.0.0"}]},{"name":"github.com/alecthomas/kong","SPDXID":"SPDXRef-golang-github.comalecthomas-kong-1.10.0-75c946","versionInfo":"1.10.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/alecthomas/kong@1.10.0"}]},{"name":"github.com/google/go-cmp","SPDXID":"SPDXRef-golang-github.comgoogle-go-cmp-0.3.1-75c946","versionInfo":"0.3.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/google/go-cmp@0.3.1"}]},{"name":"github.com/secure-systems-lab/go-securesystemslib","SPDXID":"SPDXRef-golang-github.comsecure-systems-lab-go-securesystemslib-0.8.0-75c946","versionInfo":"0.8.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/secure-systems-lab/go-securesystemslib@0.8.0"}]},{"name":"github.com/go-openapi/swag","SPDXID":"SPDXRef-golang-github.comgo-openapi-swag-0.23.0-75c946","versionInfo":"0.23.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/go-openapi/swag@0.23.0"}]},{"name":"github.com/sigstore/sigstore","SPDXID":"SPDXRef-golang-github.comsigstore-sigstore-1.8.11-75c946","versionInfo":"1.8.11","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/sigstore/sigstore@1.8.11"}]},{"name":"codecov/codecov-action","SPDXID":"SPDXRef-githubactions-codecov-codecov-action-0565863a31f2c772f9f0395002a31e3f06189574-75c946","versionInfo":"0565863a31f2c772f9f0395002a31e3f06189574","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574"}]},{"name":"github.com/google/go-querystring","SPDXID":"SPDXRef-golang-github.comgoogle-go-querystring-1.1.0-75c946","versionInfo":"1.1.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/google/go-querystring@1.1.0"}]},{"name":"github.com/gofri/go-github-ratelimit/v2","SPDXID":"SPDXRef-golang-github.comgofrigo-github-ratelimit-v2-2.0.2-75c946","versionInfo":"2.0.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/gofri/go-github-ratelimit/v2@2.0.2"}]},{"name":"github.com/PuerkitoBio/goquery","SPDXID":"SPDXRef-golang-github.compuerkitobio-goquery-1.10.2-75c946","versionInfo":"1.10.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/puerkitobio/goquery@1.10.2"}]},{"name":"github.com/jedisct1/go-minisign","SPDXID":"SPDXRef-golang-github.comjedisct1-go-minisign-0.0.0-20211028175153-1c139d1cc84b-75c946","versionInfo":"0.0.0-20211028175153-1c139d1cc84b","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/jedisct1/go-minisign@0.0.0-20211028175153-1c139d1cc84b"}]},{"name":"golang.org/x/oauth2","SPDXID":"SPDXRef-golang-golang.orgx-oauth2-0.0.0-20200902213428-5d25da1a8d43-75c946","versionInfo":"0.0.0-20200902213428-5d25da1a8d43","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/golang.org/x/oauth2@0.0.0-20200902213428-5d25da1a8d43"}]},{"name":"github.com/pelletier/go-toml/v2","SPDXID":"SPDXRef-golang-github.compelletiergo-toml-v2-2.1.0-75c946","versionInfo":"2.1.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/pelletier/go-toml/v2@2.1.0"}]},{"name":"github.com/spf13/cast","SPDXID":"SPDXRef-golang-github.comspf13-cast-1.6.0-75c946","versionInfo":"1.6.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/spf13/cast@1.6.0"}]},{"name":"github.com/google/uuid","SPDXID":"SPDXRef-golang-github.comgoogle-uuid-1.6.0-75c946","versionInfo":"1.6.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/google/uuid@1.6.0"}]},{"name":"github.com/go-openapi/runtime","SPDXID":"SPDXRef-golang-github.comgo-openapi-runtime-0.28.0-75c946","versionInfo":"0.28.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/go-openapi/runtime@0.28.0"}]},{"name":"github.com/go-openapi/validate","SPDXID":"SPDXRef-golang-github.comgo-openapi-validate-0.24.0-75c946","versionInfo":"0.24.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/go-openapi/validate@0.24.0"}]},{"name":"github.com/google/certificate-transparency-go","SPDXID":"SPDXRef-golang-github.comgoogle-certificate-transparency-go-1.2.1-75c946","versionInfo":"1.2.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/google/certificate-transparency-go@1.2.1"}]},{"name":"github.com/spf13/afero","SPDXID":"SPDXRef-golang-github.comspf13-afero-1.11.0-75c946","versionInfo":"1.11.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/spf13/afero@1.11.0"}]},{"name":"github.com/letsencrypt/boulder","SPDXID":"SPDXRef-golang-github.comletsencrypt-boulder-0.0.0-20240620165639-de9c06129bec-75c946","versionInfo":"0.0.0-20240620165639-de9c06129bec","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/letsencrypt/boulder@0.0.0-20240620165639-de9c06129bec"}]},{"name":"golang.org/x/tools","SPDXID":"SPDXRef-golang-golang.orgx-tools-0.29.0-75c946","versionInfo":"0.29.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/golang.org/x/tools@0.29.0"}]},{"name":"github.com/digitorus/timestamp","SPDXID":"SPDXRef-golang-github.comdigitorus-timestamp-0.0.0-20231217203849-220c5c2851b7-75c946","versionInfo":"0.0.0-20231217203849-220c5c2851b7","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/digitorus/timestamp@0.0.0-20231217203849-220c5c2851b7"}]},{"name":"github.com/google/go-github/v71","SPDXID":"SPDXRef-golang-github.comgooglego-github-v71-71.0.0-75c946","versionInfo":"71.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/google/go-github/v71@71.0.0"}]},{"name":"github.com/xlzd/gotp","SPDXID":"SPDXRef-golang-github.comxlzd-gotp-0.1.0-75c946","versionInfo":"0.1.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/xlzd/gotp@0.1.0"}]},{"name":"golang.org/x/sync","SPDXID":"SPDXRef-golang-golang.orgx-sync-0.13.0-75c946","versionInfo":"0.13.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/golang.org/x/sync@0.13.0"}]},{"name":"google.golang.org/appengine","SPDXID":"SPDXRef-golang-google.golang.org-appengine-1.6.8-75c946","versionInfo":"1.6.8","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/google.golang.org/appengine@1.6.8"}]},{"name":"github.com/golang-jwt/jwt/v4","SPDXID":"SPDXRef-golang-github.comgolang-jwtjwt-v4-4.5.2-75c946","versionInfo":"4.5.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/golang-jwt/jwt/v4@4.5.2"}]},{"name":"github.com/inconshreveable/mousetrap","SPDXID":"SPDXRef-golang-github.cominconshreveable-mousetrap-1.1.0-75c946","versionInfo":"1.1.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/inconshreveable/mousetrap@1.1.0"}]},{"name":"go.uber.org/multierr","SPDXID":"SPDXRef-golang-go.uber.org-multierr-1.11.0-75c946","versionInfo":"1.11.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/go.uber.org/multierr@1.11.0"}]},{"name":"go.uber.org/zap","SPDXID":"SPDXRef-golang-go.uber.org-zap-1.27.0-75c946","versionInfo":"1.27.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/go.uber.org/zap@1.27.0"}]},{"name":"github.com/go-openapi/jsonpointer","SPDXID":"SPDXRef-golang-github.comgo-openapi-jsonpointer-0.21.0-75c946","versionInfo":"0.21.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/go-openapi/jsonpointer@0.21.0"}]},{"name":"go.opentelemetry.io/otel/trace","SPDXID":"SPDXRef-golang-go.opentelemetry.iootel-trace-1.27.0-75c946","versionInfo":"1.27.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/go.opentelemetry.io/otel/trace@1.27.0"}]},{"name":"golang.org/x/sys","SPDXID":"SPDXRef-golang-golang.orgx-sys-0.30.0-75c946","versionInfo":"0.30.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/golang.org/x/sys@0.30.0"}]},{"name":"github.com/golangci/plugin-module-register","SPDXID":"SPDXRef-golang-github.comgolangci-plugin-module-register-0.1.1-75c946","versionInfo":"0.1.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/golangci/plugin-module-register@0.1.1"}]},{"name":"gopkg.in/ini.v1","SPDXID":"SPDXRef-golang-gopkg.in-ini.v1-1.67.0-75c946","versionInfo":"1.67.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/gopkg.in/ini.v1@1.67.0"}]},{"name":"github.com/spf13/viper","SPDXID":"SPDXRef-golang-github.comspf13-viper-1.18.2-75c946","versionInfo":"1.18.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/spf13/viper@1.18.2"}]},{"name":"google.golang.org/genproto/googleapis/api","SPDXID":"SPDXRef-golang-google.golang.orggenprotogoogleapis-api-0.0.0-20240520151616-dc85e6b867a5-75c946","versionInfo":"0.0.0-20240520151616-dc85e6b867a5","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/google.golang.org/genproto/googleapis/api@0.0.0-20240520151616-dc85e6b867a5"}]},{"name":"github.com/perimeterx/marshmallow","SPDXID":"SPDXRef-golang-github.comperimeterx-marshmallow-1.1.5-75c946","versionInfo":"1.1.5","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/perimeterx/marshmallow@1.1.5"}]},{"name":"golang.org/x/sync","SPDXID":"SPDXRef-golang-golang.orgx-sync-0.10.0-75c946","versionInfo":"0.10.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/golang.org/x/sync@0.10.0"}]},{"name":"actions/cache","SPDXID":"SPDXRef-githubactions-actions-cache-5a3ec84eff668545956fd18022155c47e93e2684-75c946","versionInfo":"5a3ec84eff668545956fd18022155c47e93e2684","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/cache@5a3ec84eff668545956fd18022155c47e93e2684"}]},{"name":"github.com/magiconair/properties","SPDXID":"SPDXRef-golang-github.commagiconair-properties-1.8.7-75c946","versionInfo":"1.8.7","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/magiconair/properties@1.8.7"}]},{"name":"github.com/opentracing/opentracing-go","SPDXID":"SPDXRef-golang-github.comopentracing-opentracing-go-1.2.0-75c946","versionInfo":"1.2.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/opentracing/opentracing-go@1.2.0"}]},{"name":"github.com/subosito/gotenv","SPDXID":"SPDXRef-golang-github.comsubosito-gotenv-1.6.0-75c946","versionInfo":"1.6.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/subosito/gotenv@1.6.0"}]},{"name":"github.com/andybalholm/cascadia","SPDXID":"SPDXRef-golang-github.comandybalholm-cascadia-1.3.3-75c946","versionInfo":"1.3.3","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/andybalholm/cascadia@1.3.3"}]},{"name":"github.com/cloudflare/circl","SPDXID":"SPDXRef-golang-github.comcloudflare-circl-1.3.7-75c946","versionInfo":"1.3.7","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/cloudflare/circl@1.3.7"}]},{"name":"github.com/hashicorp/go-cleanhttp","SPDXID":"SPDXRef-golang-github.comhashicorp-go-cleanhttp-0.5.2-75c946","versionInfo":"0.5.2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/hashicorp/go-cleanhttp@0.5.2"}]},{"name":"github.com/oklog/ulid","SPDXID":"SPDXRef-golang-github.comoklog-ulid-1.3.1-75c946","versionInfo":"1.3.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/oklog/ulid@1.3.1"}]},{"name":"github.com/spf13/cobra","SPDXID":"SPDXRef-golang-github.comspf13-cobra-1.8.1-75c946","versionInfo":"1.8.1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/spf13/cobra@1.8.1"}]},{"name":"golang.org/x/net","SPDXID":"SPDXRef-golang-golang.orgx-net-0.38.0-75c946","versionInfo":"0.38.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/golang.org/x/net@0.38.0"}]},{"name":"github.com/go-openapi/jsonreference","SPDXID":"SPDXRef-golang-github.comgo-openapi-jsonreference-0.21.0-75c946","versionInfo":"0.21.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/go-openapi/jsonreference@0.21.0"}]},{"name":"golang.org/x/term","SPDXID":"SPDXRef-golang-golang.orgx-term-0.29.0-75c946","versionInfo":"0.29.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/golang.org/x/term@0.29.0"}]},{"name":"github.com/PuerkitoBio/goquery","SPDXID":"SPDXRef-golang-github.compuerkitobio-goquery-1.5.0-75c946","versionInfo":"1.5.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/puerkitobio/goquery@1.5.0"}]},{"name":"github.com/opencontainers/go-digest","SPDXID":"SPDXRef-golang-github.comopencontainers-go-digest-1.0.0-75c946","versionInfo":"1.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/opencontainers/go-digest@1.0.0"}]},{"name":"github.com/cyberphone/json-canonicalization","SPDXID":"SPDXRef-golang-github.comcyberphone-json-canonicalization-0.0.0-20220623050100-57a0ce2678a7-75c946","versionInfo":"0.0.0-20220623050100-57a0ce2678a7","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/cyberphone/json-canonicalization@0.0.0-20220623050100-57a0ce2678a7"}]},{"name":"github.com/go-jose/go-jose/v4","SPDXID":"SPDXRef-golang-github.comgo-josego-jose-v4-4.0.5-75c946","versionInfo":"4.0.5","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/go-jose/go-jose/v4@4.0.5"}]},{"name":"github.com/blang/semver","SPDXID":"SPDXRef-golang-github.comblang-semver-3.5.1incompatible-75c946","versionInfo":"3.5.1+incompatible","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/blang/semver@3.5.1%2Bincompatible"}]},{"name":"github.com/shibumi/go-pathspec","SPDXID":"SPDXRef-golang-github.comshibumi-go-pathspec-1.3.0-75c946","versionInfo":"1.3.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/shibumi/go-pathspec@1.3.0"}]},{"name":"github.com/sagikazarmark/locafero","SPDXID":"SPDXRef-golang-github.comsagikazarmark-locafero-0.4.0-75c946","versionInfo":"0.4.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/github.com/sagikazarmark/locafero@0.4.0"}]},{"name":"go.opentelemetry.io/otel","SPDXID":"SPDXRef-golang-go.opentelemetry.io-otel-1.27.0-75c946","versionInfo":"1.27.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:golang/go.opentelemetry.io/otel@1.27.0"}]},{"name":"com.github.google/go-github","SPDXID":"SPDXRef-github-google-go-github-master-d38762","versionInfo":"master","downloadLocation":"git+https://github.com/google/go-github","filesAnalyzed":false,"licenseDeclared":"BSD-3-Clause","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/google/go-github@master"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgo-openapi-strfmt-0.23.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comhashicorp-go-retryablehttp-0.7.7-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgo-openapi-jsonpointer-0.21.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comopentracing-opentracing-go-1.2.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-golang.orgx-mod-0.20.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgooglego-github-v71-71.0.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-golang.orgx-sync-0.13.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgofrigo-github-ratelimit-v2-2.0.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-golang.orgx-tools-0.29.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comcloudflare-circl-1.3.7-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-k8s.ioklog-v2-2.120.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.commitchellh-mapstructure-1.5.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comsigstore-sigstore-go-0.6.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgooglego-github-v41-41.0.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comsagikazarmark-slog-shim-0.1.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comsigstore-protobuf-specs-0.3.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comin-toto-attestation-1.1.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comoklog-ulid-1.3.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgo-openapi-loads-0.22.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comsassoftware-relic-7.2.1incompatible-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgolang-jwtjwt-v4-4.5.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.commagiconair-properties-1.8.7-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comsagikazarmark-locafero-0.4.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.combradleyfalzonghinstallation-v2-2.0.4-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgo-openapi-runtime-0.28.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgolang-protobuf-1.5.4-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgetkin-kin-openapi-0.131.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgo-chi-chi-4.1.2incompatible-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comsigstore-timestamp-authority-1.2.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-11bd71901bbe5b1630ceea73d27597364c9af683-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-githubactions-codecov-codecov-action-0565863a31f2c772f9f0395002a31e3f06189574-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comopencontainers-go-digest-1.0.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comtitanous-rocacheck-0.0.0-20171023193734-afe73141d399-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comsubosito-gotenv-1.6.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-golang.orgx-net-0.38.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comoasdiff-yaml-0.0.0-20250309154309-f31be36b4037-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgofri-go-github-pagination-1.0.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-golang.orgx-sync-0.10.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-google.golang.orggenprotogoogleapis-api-0.0.0-20240520151616-dc85e6b867a5-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgoogle-go-cmp-0.7.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comalecthomas-kong-1.10.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgoogle-uuid-1.6.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comletsencrypt-boulder-0.0.0-20240620165639-de9c06129bec-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-go.uber.org-zap-1.27.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgo-openapi-jsonreference-0.21.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-golang.orgx-net-0.0.0-20191014212845-da9a3fd4c582-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-golang.orgx-mod-0.22.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgooglego-github-v37-37.0.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-gopkg.in-ini.v1-1.67.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-go.mongodb.org-mongo-driver-1.14.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgokillers-libsodium-go-0.0.0-20171022220152-dd733721c3cb-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-go.opentelemetry.iootel-metric-1.27.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comperimeterx-marshmallow-1.1.5-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comspf13-cobra-1.8.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comspf13-afero-1.11.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-go.opentelemetry.iootel-trace-1.27.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comshibumi-go-pathspec-1.3.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comoasdiff-yaml3-0.0.0-20250309153720-d2182401db90-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-golang.orgx-sync-0.11.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-golang.orgx-crypto-0.35.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comtransparency-dev-merkle-0.0.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-golang.orgx-exp-0.0.0-20240112132812-db7319d0e0e3-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.compmezard-go-difflib-1.0.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-golang.orgx-sys-0.30.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comprotonmail-go-crypto-0.0.0-20230828082145-3c4c8a2d2371-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgo-logr-stdr-1.2.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-google.golang.org-protobuf-1.34.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comin-toto-in-toto-golang-0.9.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgoogle-go-cmp-0.3.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgoogle-certificate-transparency-go-1.2.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgo-josego-jose-v4-4.0.5-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comjosharian-intern-1.0.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comasaskevich-govalidator-0.0.0-20230301143203-a9d515a09cc2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-go.uber.org-multierr-1.11.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-gopkg.in-yaml.v2-2.3.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgoogle-go-querystring-1.1.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.commailru-easyjson-0.7.7-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comsigstore-sigstore-1.8.11-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-golang.orgx-text-0.22.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgo-openapi-errors-0.22.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgolangci-plugin-module-register-0.1.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-githubactions-actions-cache-5a3ec84eff668545956fd18022155c47e93e2684-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-golang.orgx-term-0.29.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comdigitorus-pkcs7-0.0.0-20230818184609-3a137a874352-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comsourcegraph-conc-0.3.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-gopkg.in-yaml.v3-3.0.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comsecure-systems-lab-go-securesystemslib-0.8.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.compuerkitobio-goquery-1.10.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-google.golang.org-appengine-1.6.8-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgooglego-github-v32-32.1.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comxlzd-gotp-0.0.0-20181030022105-c8557ba2c119-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-githubactions-actions-setup-go-0aaccfd150d50ccaeb58ebd88d36e91967a5f35b-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.compelletiergo-toml-v2-2.1.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.cominconshreveable-mousetrap-1.1.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.compuerkitobio-goquery-1.5.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-go.opentelemetry.io-otel-1.27.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comsigstore-rekor-1.3.6-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comjedisct1-go-minisign-0.0.0-20211028175153-1c139d1cc84b-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comspf13-cast-1.6.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comtheupdateframework-go-tuf-0.7.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comfsnotify-fsnotify-1.7.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comspf13-pflag-1.0.5-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.compkg-errors-0.9.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comhashicorp-hcl-1.0.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgo-openapi-validate-0.24.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comxlzd-gotp-0.1.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comcyberphone-json-canonicalization-0.0.0-20220623050100-57a0ce2678a7-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgo-logr-logr-1.4.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-golang.orgx-net-0.36.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgo-openapi-analysis-0.23.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comandybalholm-cascadia-1.3.3-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.commohae-deepcopy-0.0.0-20170929034955-c48cc78d4826-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgo-test-deep-1.1.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comhashicorp-go-cleanhttp-0.5.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comblang-semver-3.5.1incompatible-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgoogle-go-containerregistry-0.20.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-golang.orgx-oauth2-0.0.0-20200902213428-5d25da1a8d43-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comtheupdateframeworkgo-tuf-v2-2.0.1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgo-openapi-spec-0.21.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comgo-openapi-swag-0.23.0-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comdigitorus-timestamp-0.0.0-20231217203849-220c5c2851b7-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-google-go-github-master-d38762","relatedSpdxElement":"SPDXRef-golang-github.comspf13-viper-1.18.2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-google-go-github-master-d38762","relationshipType":"DESCRIBES"}]}