{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.kitplummer/goa","documentNamespace":"https://spdx.org/spdxdocs/protobom/6fac0ae8-e5ea-44c7-a0c1-c4dd4ef399c6","comment":"Exact versions could not be resolved for some packages. For more information: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph#dependencies-included.","creationInfo":{"creators":["Tool: protobom-v0.0.0-20260120171901-fda334ae0b58+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2026-01-21T07:48:53Z"},"packages":[{"name":"actions/upload-artifact","SPDXID":"SPDXRef-githubactions-actions-upload-artifact-82c141cc518b40d92cc801eee768e7aafc9c2fa2-75c946","versionInfo":"82c141cc518b40d92cc801eee768e7aafc9c2fa2","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/upload-artifact@82c141cc518b40d92cc801eee768e7aafc9c2fa2"}]},{"name":"ossf/scorecard-action","SPDXID":"SPDXRef-githubactions-ossf-scorecard-action-c1aec4ac820532bab364f02a81873c555a0ba3a1-75c946","versionInfo":"c1aec4ac820532bab364f02a81873c555a0ba3a1","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/ossf/scorecard-action@c1aec4ac820532bab364f02a81873c555a0ba3a1"}]},{"name":"github/codeql-action/upload-sarif","SPDXID":"SPDXRef-githubactions-githubcodeql-action-upload-sarif-d39d5d5c9707b926d517b1b292905ef4c03aa777-75c946","versionInfo":"d39d5d5c9707b926d517b1b292905ef4c03aa777","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/github/codeql-action/upload-sarif@d39d5d5c9707b926d517b1b292905ef4c03aa777"}]},{"name":"serde","SPDXID":"SPDXRef-cargo-serde-75c946","versionInfo":"\u003e= 1.0.0,\u003c 2.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/serde"}]},{"name":"serde_json","SPDXID":"SPDXRef-cargo-serdejson-75c946","versionInfo":"\u003e= 1.0.0,\u003c 2.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/serde_json"}]},{"name":"anyhow","SPDXID":"SPDXRef-cargo-anyhow-75c946","versionInfo":"\u003e= 1.0.0,\u003c 2.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/anyhow"}]},{"name":"chrono","SPDXID":"SPDXRef-cargo-chrono-75c946","versionInfo":"\u003e= 0.4.0,\u003c 0.5.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/chrono"}]},{"name":"url","SPDXID":"SPDXRef-cargo-url-75c946","versionInfo":"\u003e= 2.0.0,\u003c 3.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/url"}]},{"name":"log","SPDXID":"SPDXRef-cargo-log-75c946","versionInfo":"\u003e= 0.4.0,\u003c 0.5.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/log"}]},{"name":"assert_cmd","SPDXID":"SPDXRef-cargo-assertcmd-75c946","versionInfo":"\u003e= 2.0.0,\u003c 3.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/assert_cmd"}]},{"name":"reqwest","SPDXID":"SPDXRef-cargo-reqwest-75c946","versionInfo":"\u003e= 0.12.0,\u003c 0.13.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/reqwest"}]},{"name":"clap","SPDXID":"SPDXRef-cargo-clap-75c946","versionInfo":"\u003e= 4.0.0,\u003c 5.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/clap"}]},{"name":"run_script","SPDXID":"SPDXRef-cargo-runscript-75c946","versionInfo":"\u003e= 0.11.0,\u003c 0.12.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/run_script"}]},{"name":"predicates","SPDXID":"SPDXRef-cargo-predicates-75c946","versionInfo":"\u003e= 3.0.0,\u003c 4.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/predicates"}]},{"name":"clokwerk","SPDXID":"SPDXRef-cargo-clokwerk-75c946","versionInfo":"\u003e= 0.4.0,\u003c 0.5.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/clokwerk"}]},{"name":"wait-timeout","SPDXID":"SPDXRef-cargo-wait-timeout-75c946","versionInfo":"\u003e= 0.2.0,\u003c 0.3.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/wait-timeout"}]},{"name":"openssl-sys","SPDXID":"SPDXRef-cargo-openssl-sys-75c946","versionInfo":"\u003e= 0.9.0,\u003c 0.10.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/openssl-sys"}]},{"name":"uuid","SPDXID":"SPDXRef-cargo-uuid-75c946","versionInfo":"\u003e= 1.0.0,\u003c 2.0.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/uuid"}]},{"name":"git2","SPDXID":"SPDXRef-cargo-git2-75c946","versionInfo":"\u003e= 0.20.0,\u003c 0.21.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/git2"}]},{"name":"env_logger","SPDXID":"SPDXRef-cargo-envlogger-75c946","versionInfo":"\u003e= 0.11.0,\u003c 0.12.0","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:cargo/env_logger"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-ec3a7ce113134d7a93b817d10a8272cb61118579-75c946","versionInfo":"ec3a7ce113134d7a93b817d10a8272cb61118579","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579"}]},{"name":"anothrNick/github-tag-action","SPDXID":"SPDXRef-githubactions-anothrNick-github-tag-action-37ff4873ee1e9b43cb25a7817cb15b2128536b84-75c946","versionInfo":"37ff4873ee1e9b43cb25a7817cb15b2128536b84","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/anothrNick/github-tag-action@37ff4873ee1e9b43cb25a7817cb15b2128536b84"}]},{"name":"dtolnay/rust-toolchain","SPDXID":"SPDXRef-githubactions-dtolnay-rust-toolchain-stable-75c946","versionInfo":"stable","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/dtolnay/rust-toolchain@stable"}]},{"name":"taiki-e/install-action","SPDXID":"SPDXRef-githubactions-taiki-e-install-action-cargo-llvm-cov-75c946","versionInfo":"cargo-llvm-cov","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/taiki-e/install-action@cargo-llvm-cov"}]},{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-4..-75c946","versionInfo":"4.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@4.%2A.%2A"}]},{"name":"coverallsapp/github-action","SPDXID":"SPDXRef-githubactions-coverallsapp-github-action-2..-75c946","versionInfo":"2.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/coverallsapp/github-action@2.%2A.%2A"}]},{"name":"docker/setup-buildx-action","SPDXID":"SPDXRef-githubactions-docker-setup-buildx-action-79abd3f86f79a9d68a23c75a09a9a85889262adf-75c946","versionInfo":"79abd3f86f79a9d68a23c75a09a9a85889262adf","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/docker/setup-buildx-action@79abd3f86f79a9d68a23c75a09a9a85889262adf"}]},{"name":"docker/metadata-action","SPDXID":"SPDXRef-githubactions-docker-metadata-action-e5622373a38e60fb6d795a4421e56882f2d7a681-75c946","versionInfo":"e5622373a38e60fb6d795a4421e56882f2d7a681","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/docker/metadata-action@e5622373a38e60fb6d795a4421e56882f2d7a681"}]},{"name":"docker/build-push-action","SPDXID":"SPDXRef-githubactions-docker-build-push-action-7f9d37fa544684fb73bfe4835ed7214c255ce02b-75c946","versionInfo":"7f9d37fa544684fb73bfe4835ed7214c255ce02b","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/docker/build-push-action@7f9d37fa544684fb73bfe4835ed7214c255ce02b"}]},{"name":"docker/login-action","SPDXID":"SPDXRef-githubactions-docker-login-action-6af3c118c8376c675363897acf1757f7a9be6583-75c946","versionInfo":"6af3c118c8376c675363897acf1757f7a9be6583","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/docker/login-action@6af3c118c8376c675363897acf1757f7a9be6583"}]},{"name":"sigstore/cosign-installer","SPDXID":"SPDXRef-githubactions-sigstore-cosign-installer-179e0f15e70e22ca2e7254fc12d68a9fbab35614-75c946","versionInfo":"179e0f15e70e22ca2e7254fc12d68a9fbab35614","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/sigstore/cosign-installer@179e0f15e70e22ca2e7254fc12d68a9fbab35614"}]},{"name":"svenstaro/upload-release-action","SPDXID":"SPDXRef-githubactions-svenstaro-upload-release-action-2..-75c946","versionInfo":"2.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/svenstaro/upload-release-action@2.%2A.%2A"}]},{"name":"mikepenz/release-changelog-builder-action","SPDXID":"SPDXRef-githubactions-mikepenz-release-changelog-builder-action-5..-75c946","versionInfo":"5.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/mikepenz/release-changelog-builder-action@5.%2A.%2A"}]},{"name":"actions-rs/toolchain","SPDXID":"SPDXRef-githubactions-actions-rs-toolchain-b2417cde72dcf67f306c0ae8e0828a81bf0b189f-75c946","versionInfo":"b2417cde72dcf67f306c0ae8e0828a81bf0b189f","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions-rs/toolchain@b2417cde72dcf67f306c0ae8e0828a81bf0b189f"}]},{"name":"com.github.kitplummer/goa","SPDXID":"SPDXRef-github-kitplummer-goa-develop-2362d9","versionInfo":"develop","downloadLocation":"git+https://github.com/kitplummer/goa","filesAnalyzed":false,"licenseDeclared":"MIT","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/kitplummer/goa@develop"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-cargo-runscript-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-githubactions-ossf-scorecard-action-c1aec4ac820532bab364f02a81873c555a0ba3a1-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-cargo-assertcmd-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-githubactions-actions-rs-toolchain-b2417cde72dcf67f306c0ae8e0828a81bf0b189f-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-cargo-chrono-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-cargo-wait-timeout-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-githubactions-coverallsapp-github-action-2..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-githubactions-docker-setup-buildx-action-79abd3f86f79a9d68a23c75a09a9a85889262adf-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-githubactions-githubcodeql-action-upload-sarif-d39d5d5c9707b926d517b1b292905ef4c03aa777-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-cargo-envlogger-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-ec3a7ce113134d7a93b817d10a8272cb61118579-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-githubactions-svenstaro-upload-release-action-2..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-githubactions-actions-upload-artifact-82c141cc518b40d92cc801eee768e7aafc9c2fa2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-cargo-anyhow-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-githubactions-anothrNick-github-tag-action-37ff4873ee1e9b43cb25a7817cb15b2128536b84-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-4..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-githubactions-docker-build-push-action-7f9d37fa544684fb73bfe4835ed7214c255ce02b-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-githubactions-sigstore-cosign-installer-179e0f15e70e22ca2e7254fc12d68a9fbab35614-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-cargo-predicates-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-cargo-serde-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-cargo-url-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-cargo-log-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-cargo-openssl-sys-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-cargo-clokwerk-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-githubactions-dtolnay-rust-toolchain-stable-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-githubactions-docker-metadata-action-e5622373a38e60fb6d795a4421e56882f2d7a681-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-githubactions-docker-login-action-6af3c118c8376c675363897acf1757f7a9be6583-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-cargo-clap-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-cargo-serdejson-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-cargo-reqwest-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-cargo-git2-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-githubactions-taiki-e-install-action-cargo-llvm-cov-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-githubactions-mikepenz-release-changelog-builder-action-5..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-kitplummer-goa-develop-2362d9","relatedSpdxElement":"SPDXRef-cargo-uuid-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-kitplummer-goa-develop-2362d9","relationshipType":"DESCRIBES"}]}