{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"com.github.trailofbits/codeql-queries","documentNamespace":"https://spdx.org/spdxdocs/protobom/e482fcae-34ee-473f-b29c-eb4c0f516328","creationInfo":{"creators":["Tool: protobom-v0.0.0-20260306181813-c682fbb3ceb5+dirty","Tool: GitHub.com-Dependency-Graph"],"created":"2026-03-09T14:04:17Z"},"packages":[{"name":"actions/checkout","SPDXID":"SPDXRef-githubactions-actions-checkout-6..-75c946","versionInfo":"6.*.*","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/actions/checkout@6.%2A.%2A"}]},{"name":"trailofbits/setup-codeql","SPDXID":"SPDXRef-githubactions-trailofbits-setup-codeql-main-75c946","versionInfo":"main","downloadLocation":"NOASSERTION","filesAnalyzed":false,"externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:githubactions/trailofbits/setup-codeql@main"}]},{"name":"com.github.trailofbits/codeql-queries","SPDXID":"SPDXRef-github-trailofbits-codeql-queries-main-fd275b","versionInfo":"main","downloadLocation":"git+https://github.com/trailofbits/codeql-queries","filesAnalyzed":false,"licenseDeclared":"AGPL-3.0","externalRefs":[{"referenceCategory":"PACKAGE-MANAGER","referenceType":"purl","referenceLocator":"pkg:github/trailofbits/codeql-queries@main"}]}],"relationships":[{"spdxElementId":"SPDXRef-github-trailofbits-codeql-queries-main-fd275b","relatedSpdxElement":"SPDXRef-githubactions-trailofbits-setup-codeql-main-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-github-trailofbits-codeql-queries-main-fd275b","relatedSpdxElement":"SPDXRef-githubactions-actions-checkout-6..-75c946","relationshipType":"DEPENDS_ON"},{"spdxElementId":"SPDXRef-DOCUMENT","relatedSpdxElement":"SPDXRef-github-trailofbits-codeql-queries-main-fd275b","relationshipType":"DESCRIBES"}]}