{ "SPDXID": "SPDXRef-DOCUMENT", "creationInfo": { "created": "2025-03-19T10:55:53Z", "creators": [ "Organization: keenlab", "Tool: ksas" ], "comment": "Generated by keenlab ksas at 2025-03-19T10:55:53Z" }, "dataLicense": "CC0-1.0", "name": "", "spdxVersion": "SPDX-2.3", "documentNamespace": "https://console.cloud.tencent.com/bsca/spdx/-b81075c7-018d-4ce1-a8c3-8d962732673b", "packages": [ { "SPDXID": "SPDXRef-aa959de3-a42e-43cb-9680-7fee7c64e45c", "description": "An implementation of JSON Pointer - Go languag", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/xeipuuv/gojsonpointer", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20190905194746-02993c407bfb" }, { "SPDXID": "SPDXRef-13edc2bc-3b53-426c-b6d4-4dba94ef23e0", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/mxk/go-flowrate", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20140419014527-cca7078d478f" }, { "SPDXID": "SPDXRef-2f71d038-d08f-4785-8860-cddf8c004f83", "description": "This package is small wrapper around the prometheus go client to help enforce convention and best practices for metrics collection in Docker projects", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/go-metrics@v0.0.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0 AND cc-by-sa-4.0", "name": "github.com/docker/go-metrics", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.1" }, { "SPDXID": "SPDXRef-62c4389b-ae13-443a-abee-dd2adea40cf9", "description": "This repo contains code which implements the Kubernetes \"apply\" operation", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.4.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "sigs.k8s.io/structured-merge-diff/v4", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v4.4.1" }, { "SPDXID": "SPDXRef-198d9ad2-e40f-4770-9c50-3a9b0e6c6941", "description": "This is the Go client library for\nPrometheus", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/prometheus/client_golang@v1.20.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/prometheus/client_golang", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.20.2" }, { "SPDXID": "SPDXRef-ff778083-1583-4e0f-ba81-9b3d6cd639b7", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/morikuni/aec@v1.0.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/morikuni/aec", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.0" }, { "SPDXID": "SPDXRef-93279a26-a1eb-4cc4-b93f-2318718e1abf", "description": "Package sequential provides a set of functions for managing sequential\nfiles on Windows", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/sys/sequential@v0.6.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/sys/sequential", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.6.0" }, { "SPDXID": "SPDXRef-ad72448d-0d19-43e7-b0be-cd4eabd26e18", "description": "Parse line as shell words", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/mattn/go-shellwords@v1.0.12", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/mattn/go-shellwords", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.12" }, { "SPDXID": "SPDXRef-6bdbad37-cdd8-493b-ad6d-f23e396dd65a", "description": "This package provides various compression algorithms", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/klauspost/compress@v1.17.11", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0 AND bsd-new AND mit", "name": "github.com/klauspost/compress", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.17.11" }, { "SPDXID": "SPDXRef-92b57bc6-987b-40da-951c-e1d52da36b7a", "description": "The yaml package enables Go programs to comfortably encode and decode YAML\nvalues", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0 AND mit", "name": "gopkg.in/yaml.v3", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v3.0.1" }, { "SPDXID": "SPDXRef-ce6a71c0-2901-4806-8b7f-6b2f98130034", "description": "Logrus is a structured logger for Go (golang), completely API compatible with\nthe standard library logger", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/sirupsen/logrus@v1.9.3", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/sirupsen/logrus", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.9.3" }, { "SPDXID": "SPDXRef-6b62b97d-075a-4627-b18c-b6b1f0daaa51", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/go@v1.5.1-1.0.20160303222718-d30aec9fd63c", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/docker/go", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.5.1-1.0.20160303222718-d30aec9fd63c" }, { "SPDXID": "SPDXRef-a1423176-6b9d-4ff4-830e-5de6477b5fd7", "description": "This package implements distance and similarity metrics for strings, based on the Levenshtein measure, in Go", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/agext/levenshtein@v1.2.3", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/agext/levenshtein", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.2.3" }, { "SPDXID": "SPDXRef-833acfb7-deeb-42a3-af0f-e48b39f12e1f", "description": "xxhash is a Go implementation of the 64-bit xxHash algorithm, XXH64", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/cespare/xxhash/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.3.0" }, { "SPDXID": "SPDXRef-4a94d2be-7e11-4e33-bace-7c566acf44eb", "description": "This repository holds supplementary Go networking packages", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/net@v0.29.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/net", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.29.0" }, { "SPDXID": "SPDXRef-670ae066-d8ba-490d-a77a-230756b553a7", "description": "A set of Go libraries that provide low-level, kubernetes-independent packages\nsupplementing the Go standard libs", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/k8s.io/utils@v0.0.0-20230726121419-3b25d923346b", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "k8s.io/utils", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20230726121419-3b25d923346b" }, { "SPDXID": "SPDXRef-9de9b058-78a8-4bd4-9473-848128830244", "description": "#VT100\n\nThis project was based on jaguilar/vt100\nThis is a vt100 screen reader", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/tonistiigi/vt100@v0.0.0-20240514184818-90bafcd6abab", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/tonistiigi/vt100", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20240514184818-90bafcd6abab" }, { "SPDXID": "SPDXRef-f3af05fc-d5e3-4683-8484-e8a87a9823d7", "description": "Common digest package used across the container ecosystem", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0 AND cc-by-sa-4.0", "name": "github.com/opencontainers/go-digest", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.0" }, { "SPDXID": "SPDXRef-d719358f-e4c1-477d-bbcc-cd15dc8f4d5c", "description": "Package signal provides helper functions for dealing with signals across\nvarious operating systems", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/sys/signal@v0.7.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/sys/signal", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.7.1" }, { "SPDXID": "SPDXRef-f35638d2-8f29-4eb5-b3af-639ad85a715a", "description": "[]\n(https://travis-ci", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/davecgh/go-spew@v1.1.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "isc", "name": "github.com/davecgh/go-spew", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.1.1" }, { "SPDXID": "SPDXRef-6e3eb099-d47f-4b60-bc9e-f8915fe08263", "description": "containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/containerd@v1.7.24", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/containerd", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.7.24" }, { "SPDXID": "SPDXRef-4a44fb6e-5208-4374-b05a-3f793706131e", "description": "Package otlptracegrpc provides an OTLP span exporter using gRPC", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" }, { "SPDXID": "SPDXRef-9f3127a4-b9e6-4fc2-bbec-4d5acc8d5b34", "description": "This section is empty", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/sdk", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" }, { "SPDXID": "SPDXRef-72753e21-f3a1-42e8-aeee-918fa412b621", "description": "This package implements types that can be used in stdlib formatting functionslike fmt", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/tonistiigi/units@v0.0.0-20180711220420-6950e57a87ea", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/tonistiigi/units", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20180711220420-6950e57a87ea" }, { "SPDXID": "SPDXRef-dd386261-c1d3-4da9-8eac-1ba89beaf958", "description": "HCL is a toolkit for creating structured configuration languages that are\nboth human- and machine-friendly, for use with command-line tools", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/hashicorp/hcl/v2@v2.20.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mpl-2.0", "name": "github.com/hashicorp/hcl/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.20.1" }, { "SPDXID": "SPDXRef-f07fa0c7-9383-4813-82ee-5acbef255031", "description": "gofuzz is a library for populating go objects with random values", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/google/gofuzz@v1.2.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/google/gofuzz", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.2.0" }, { "SPDXID": "SPDXRef-3c6ccea9-5a68-4081-a656-6285708ee52e", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/go-connections@v0.5.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/docker/go-connections", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.5.0" }, { "SPDXID": "SPDXRef-b90bdee3-6305-456f-addc-f24a6d1f1a50", "description": "This repository holds supplementary Go cryptography packages", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.27.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/crypto", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.27.0" }, { "SPDXID": "SPDXRef-4cd17559-dfe6-40e2-97f6-fc68c829f1a7", "description": "This repository provides Go concurrency primitives in addition to the\nones provided by the language and \"sync\" and \"sync/atomic\" packages", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/sync@v0.8.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/sync", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.8.0" }, { "SPDXID": "SPDXRef-aef6a7e1-3aa4-4853-95a0-28276f356834", "description": "Gorilla WebSocket is a Go implementation of the\nWebSocket protocol", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/gorilla/websocket@v1.5.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-simplified", "name": "github.com/gorilla/websocket", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.5.0" }, { "SPDXID": "SPDXRef-2d73c40e-38bd-4a82-8eaa-2b3df5833752", "description": "Contains a bunch of helper functions for go-openapi and go-swagger projects", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/go-openapi/swag@v0.22.3", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/go-openapi/swag", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.22.3" }, { "SPDXID": "SPDXRef-ac59aa54-a397-4ad4-896b-d3df22253cd6", "description": "This repository is the home of the Docker CLI", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/cli@v27.4.0-rc.2%2Bincompatible", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/docker/cli", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v27.4.0-rc.2+incompatible" }, { "SPDXID": "SPDXRef-3a442d28-fcdb-4198-93a4-54e6c5269e4e", "description": "A transport-agnostic, filesystem metadata manifest system\nThis project is a staging area for experiments in providing transport agnostic\nmetadata storage", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/continuity@v0.4.5", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/continuity", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.4.5" }, { "SPDXID": "SPDXRef-8ed698d3-1b45-4ffb-be3a-e0bacb367a9e", "description": "Package imds provides the API client for interacting with the Amazon EC2\nInstance Metadata Service", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.14.11", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.14.11" }, { "SPDXID": "SPDXRef-eae2c394-2272-45f9-9997-a4caca868c06", "description": "The yaml package enables Go programs to comfortably encode and decode YAML\nvalues", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "gopkg.in/yaml.v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.4.0" }, { "SPDXID": "SPDXRef-6e715268-b4a4-4a6c-810d-3e6ca86e4beb", "description": "Package inf (type inf", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/gopkg.in/inf.v0@v0.9.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "gopkg.in/inf.v0", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.9.1" }, { "SPDXID": "SPDXRef-8edeeb8d-1cec-43ea-809b-2f9a9b15f12a", "description": "The Notary project has officially been accepted in to the Cloud Native Computing Foundation (CNCF)", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/theupdateframework/notary@v0.7.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/theupdateframework/notary", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.7.0" }, { "SPDXID": "SPDXRef-b901a9d3-463e-426e-a598-8aafa3c10a84", "description": "Package userns provides utilities to detect whether we are currently running\nin a Linux user namespace", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/sys/userns@v0.1.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/sys/userns", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.1.0" }, { "SPDXID": "SPDXRef-ac08ea79-5305-475c-9094-ba23f69532b4", "description": "This section is empty", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/sys/user@v0.3.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/sys/user", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.3.0" }, { "SPDXID": "SPDXRef-53f3aabe-297e-4ae4-ab3f-e8079672485f", "description": "Package mountinfo provides a set of functions to retrieve information about OS mounts", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/sys/mountinfo@v0.7.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/sys/mountinfo", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.7.2" }, { "SPDXID": "SPDXRef-c3cb77e6-3d4e-4e84-87ce-df41254a4526", "description": "locker provides a mechanism for creating finer-grained locking to helpfree up more global locks to handle other tasks", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/locker@v1.0.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/locker", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.1" }, { "SPDXID": "SPDXRef-b11e03e0-5fd4-4ce7-88be-827334b49f5d", "description": "Package gorilla/mux implements a request router and dispatcher", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/gorilla/mux@v1.8.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/gorilla/mux", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.8.1" }, { "SPDXID": "SPDXRef-ef065958-6e4c-4af0-8304-9d621acba956", "description": "logr offers an(other) opinion on how Go programs and libraries can do logging\nwithout becoming coupled to a particular logging implementation", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/go-logr/logr", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.4.2" }, { "SPDXID": "SPDXRef-2828d7bf-1bfc-4ecc-a521-14a43c850acc", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v0.3.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/errdefs", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.3.0" }, { "SPDXID": "SPDXRef-7748f5a1-1e24-44ec-8aef-c06e931a13d0", "description": "This is a library containing utilities to generate (reference) documentation\nfor the docker CLI on docs", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/cli-docs-tool@v0.8.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/docker/cli-docs-tool", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.8.0" }, { "SPDXID": "SPDXRef-46c4d2b8-8344-4606-a80c-e3dfa24a48d0", "description": "The semver package provides the ability to work with Semantic Versions in Go", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/masterminds/semver/v3@v3.2.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/masterminds/semver/v3", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v3.2.1" }, { "SPDXID": "SPDXRef-37169141-6c28-450b-8e7a-15b0ac368da7", "description": "This section is empty", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20240701130421-f6361c86f094", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "google.golang.org/genproto/googleapis/api", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20240701130421-f6361c86f094" }, { "SPDXID": "SPDXRef-179d9104-ef51-449d-879d-97435f415b29", "description": "Incremental file directory sync tools in golang", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/tonistiigi/fsutil@v0.0.0-20241121093142-31cf1f437184", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/tonistiigi/fsutil", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20241121093142-31cf1f437184" }, { "SPDXID": "SPDXRef-3e878a25-66dd-49a8-84cb-7d0c2c589c64", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/pmezard/go-difflib", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.0" }, { "SPDXID": "SPDXRef-21077329-c038-4761-ab43-865db3b04b78", "description": "gogoprotobuf is a fork of golang/protobuf with extra code generation features", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/gogo/protobuf@v1.3.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/gogo/protobuf", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.3.2" }, { "SPDXID": "SPDXRef-059bcccd-0fcc-4a58-b479-9bbfd02bb419", "description": "package for building REST-style Web Services using Google Go\n\n\n\nREST asks developers to use HTTP methods explicitly and in a way that's consistent with the protocol definition", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/emicklei/go-restful/v3@v3.11.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/emicklei/go-restful/v3", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v3.11.0" }, { "SPDXID": "SPDXRef-6565829a-2f1f-4161-bf88-21e0e346f607", "description": "Scheme, typing, encoding, decoding, and conversion packages for Kubernetes and Kubernetes-like API objects", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/k8s.io/apimachinery@v0.29.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "k8s.io/apimachinery", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.29.2" }, { "SPDXID": "SPDXRef-1487ea7a-9731-44d4-87ff-206344ec9d58", "description": "This project hosts the Go implementation for\nprotocol buffers, which is a\nlanguage-neutral, platform-neutral, extensible mechanism for serializing\nstructured data", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.35.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "google.golang.org/protobuf", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.35.1" }, { "SPDXID": "SPDXRef-1f0d1d9b-97ad-4cf5-9707-9065052630fd", "description": "This section is empty", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.5.10", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.5.10" }, { "SPDXID": "SPDXRef-4b7457cd-7b93-4029-814b-31e3c5e5e572", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/serialx/hashring@v0.0.0-20200727003509-22c0c7ab6b1b", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/serialx/hashring", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20200727003509-22c0c7ab6b1b" }, { "SPDXID": "SPDXRef-edeee15f-4557-4525-91a1-ec3e43fc9065", "description": "Package errors provides simple error handling primitives", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-simplified", "name": "github.com/pkg/errors", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.9.1" }, { "SPDXID": "SPDXRef-6ff38f5d-b181-4b0c-9687-85833b956ff4", "description": "This repository provides the protoc-gen-go-vtproto plug-in for protoc, which is used by Vitess to generate optimized marshall & unmarshal code", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/planetscale/vtprotobuf", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.6.1-0.20240319094008-0393e58bdf10" }, { "SPDXID": "SPDXRef-d241bb3c-a8d8-428d-b6f2-011cf47798a3", "description": "term provides structures and helper functions to work with terminal (state, sizes)", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/term@v0.5.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/term", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.5.0" }, { "SPDXID": "SPDXRef-cefd7719-a732-403f-89b1-5f6dde3bcf24", "description": "go-units is a library to transform human friendly measurements into machine friendly values", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/go-units@v0.5.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/docker/go-units", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.5.0" }, { "SPDXID": "SPDXRef-8ace94cb-a6e3-460e-a342-d7d8097a7880", "description": "docker-credential-helpers is a suite of programs to use native stores to keep Docker credentials safe", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/docker-credential-helpers@v0.8.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/docker/docker-credential-helpers", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.8.2" }, { "SPDXID": "SPDXRef-e782f9f0-3cf5-430a-88c1-3eb83d5dd028", "description": "Perks contains the Go package quantile that computes approximate quantiles over\nan unbounded data stream within low memory and CPU bounds", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/beorn7/perks@v1.0.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/beorn7/perks", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.1" }, { "SPDXID": "SPDXRef-3b697566-0a2a-4442-9dba-d724cfd81636", "description": "Package otlptrace contains abstractions for OTLP span exporters", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" }, { "SPDXID": "SPDXRef-fd88748f-325f-4f98-8d86-177cc04f1e10", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/zclconf/go-cty@v1.14.4", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/zclconf/go-cty", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.14.4" }, { "SPDXID": "SPDXRef-7242c22c-3c24-4673-8b54-3b69b87f5e92", "description": "The OCI Image Format project creates and maintains the software shipping container image format spec (OCI Image Format)", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/opencontainers/image-spec@v1.1.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/opencontainers/image-spec", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.1.0" }, { "SPDXID": "SPDXRef-fdb78ca5-ff80-4296-8723-265f85ea49bd", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/pelletier/go-toml@v1.9.5", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0 AND mit", "name": "github.com/pelletier/go-toml", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.9.5" }, { "SPDXID": "SPDXRef-9fce4863-1414-4b28-bd9f-7eeacb6bbdfc", "description": "go-wordwrap (Golang package: wordwrap) is a package for Go that\nautomatically wraps words into multiple lines", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/mitchellh/go-wordwrap@v0.0.0-20150314170334-ad45545899c7", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/mitchellh/go-wordwrap", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20150314170334-ad45545899c7" }, { "SPDXID": "SPDXRef-eec92362-5043-49af-9b0b-46d58e3a9c33", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/mattn/go-runewidth", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.15" }, { "SPDXID": "SPDXRef-a4fb11f1-8140-47f0-a5c8-afe4c40425bb", "description": "Docs: https://godoc", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/josharian/intern@v1.0.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/josharian/intern", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.0" }, { "SPDXID": "SPDXRef-c330b826-8a1f-4097-afe8-87b7f886b494", "description": "This package implements the logr interface\nin terms of Go's standard log package(https://pkg", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/go-logr/stdr", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.2.2" }, { "SPDXID": "SPDXRef-31b2b0a9-fc39-436c-bb7d-dcf379a9285c", "description": "Package metric provides the OpenTelemetry API used to measure metrics about\nsource code operation", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/metric", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" }, { "SPDXID": "SPDXRef-e9e39ee4-a834-4b07-b921-3d14d412461a", "description": "Package otelgrpc is the instrumentation library for google", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.46.1" }, { "SPDXID": "SPDXRef-f74b8cb8-8643-4246-9375-668d3f23ea15", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/hashicorp/go-cty-funcs@v0.0.0-20230405223818-a090f58aa992", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mpl-2.0", "name": "github.com/hashicorp/go-cty-funcs", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20230405223818-a090f58aa992" }, { "SPDXID": "SPDXRef-2faec678-4847-4a21-850c-15ffa1f97675", "description": "Functions for accessing \"clean\" Go http", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mpl-2.0", "name": "github.com/hashicorp/go-cleanhttp", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.5.2" }, { "SPDXID": "SPDXRef-6c5024c6-608e-460f-8869-3b3bef57d272", "description": "A helper to merge structs and maps in Golang", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/imdario/mergo@v0.3.16", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/imdario/mergo", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.3.16" }, { "SPDXID": "SPDXRef-30cea2d4-0cf8-410a-bf0a-39ba039e6635", "description": "An implementation of JSON Reference - Go language\nWork in progress ( 90% done )\nhttps://github", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/go-openapi/jsonreference", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.20.2" }, { "SPDXID": "SPDXRef-f5c1a818-47ba-4995-8ee5-dacdfa73b747", "description": "Schema of the external API types that are served by the Kubernetes API server", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/k8s.io/api@v0.29.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "k8s.io/api", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.29.2" }, { "SPDXID": "SPDXRef-5a429862-d4e0-480b-93a9-379b0c0ca303", "description": "go-pathspec implements gitignore-style pattern matching for paths", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/shibumi/go-pathspec", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.3.0" }, { "SPDXID": "SPDXRef-787bae2b-2f26-46d9-b5ed-0cad625cc49e", "description": "Golang package for dealing with consoles", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/console@v1.0.4", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/console", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.4" }, { "SPDXID": "SPDXRef-8b345e70-83bf-4089-8c9f-d93b25f742cb", "description": "This section is empty", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.2.10", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/internal/configsources", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.2.10" }, { "SPDXID": "SPDXRef-f85e8126-f338-4d75-b6ca-52a2081ec2d3", "description": "This is a Go port of the exponential backoff algorithm from Google's HTTP Client Library for Java", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/cenkalti/backoff/v4", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v4.3.0" }, { "SPDXID": "SPDXRef-8e1ffa64-0166-43ad-ab93-153fcb9c6e7b", "description": "This library is a subproject of sig-api-machinery", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/sigs.k8s.io/json@v0.0.0-20221116044647-bc3834ca7abd", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0 AND bsd-new", "name": "sigs.k8s.io/json", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20221116044647-bc3834ca7abd" }, { "SPDXID": "SPDXRef-098842ee-8e51-4dd4-846e-51e018a12ad9", "description": "Package easyjson provides a fast and easy way to marshal/unmarshal Go structs\nto/from JSON without the use of reflection", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/mailru/easyjson@v0.7.7", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/mailru/easyjson", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.7.7" }, { "SPDXID": "SPDXRef-cf7a4c04-0632-4058-a2b8-41640fc8c27a", "description": "A high-performance 100% compatible drop-in replacement of \"encoding/json\"\nYou can also use thrift like JSON using thrift-iterator\n\nSource code: https://github", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/json-iterator/go@v1.1.12", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/json-iterator/go", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.1.12" }, { "SPDXID": "SPDXRef-71015480-6820-484d-a4e7-a334749c1d8a", "description": "flock implements a thread-safe sync", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/gofrs/flock@v0.12.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/gofrs/flock", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.12.1" }, { "SPDXID": "SPDXRef-fc2aaced-d0d4-4864-8d8e-890402754ad5", "description": "Package otlpmetricgrpc provides an OTLP metrics exporter using gRPC", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc@v0.44.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.44.0" }, { "SPDXID": "SPDXRef-78918510-6537-48da-ac15-d7a7b54a33d9", "description": "ScopeName is the instrumentation scope name", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.46.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.46.1" }, { "SPDXID": "SPDXRef-32429248-3fc2-4f9f-a6c4-58c8cff8a2d9", "description": "This package is intended to be a more powerful and safer alternative to\nreflect", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/google/go-cmp@v0.6.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/google/go-cmp", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.6.0" }, { "SPDXID": "SPDXRef-ea61a91d-ab23-4600-b684-5281c741c0cd", "description": "Sort orders and comparison functions", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/fvbommel/sortorder@v1.0.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/fvbommel/sortorder", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.1" }, { "SPDXID": "SPDXRef-850cce87-60b3-4500-a826-f3e2e8070650", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/apparentlymart/go-cidr@v1.0.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/apparentlymart/go-cidr", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.1" }, { "SPDXID": "SPDXRef-7963dd0a-3865-4fcb-a3cb-ef77ccd2c731", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/apparentlymart/go-textseg/v15@v15.0.0", "referenceType": "purl" } ], "filesAnalyzed": true, "name": "github.com/apparentlymart/go-textseg/v15", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v15.0.0" }, { "SPDXID": "SPDXRef-8d0b5c81-2ebe-4484-b448-45c763dd02c2", "description": "This Go package implements Unicode Text Segmentation according to Unicode Standard Annex #29 (Unicode version 12", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/rivo/uniseg@v0.2.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/rivo/uniseg", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.2.0" }, { "SPDXID": "SPDXRef-2309c779-f966-4291-9f1c-14919768f710", "description": "Go reference library for parsing and loading Compose files as specified by the\nCompose specification", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/compose-spec/compose-go/v2@v2.4.4", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/compose-spec/compose-go/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.4.4" }, { "SPDXID": "SPDXRef-63bfb198-798b-4723-9a70-b7b143349773", "description": "This repository holds supplementary Go packages for text processing,\nmany involving Unicode", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/text@v0.18.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/text", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.18.0" }, { "SPDXID": "SPDXRef-bb45f08c-eee8-45a3-9b5f-89cf6fc11f46", "description": "This subrepository holds experimental and deprecated (in the old\ndirectory) packages", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/exp@v0.0.0-20240909161429-701f63a606c0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/exp", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20240909161429-701f63a606c0" }, { "SPDXID": "SPDXRef-062dec50-8bfe-4244-807a-36384d7e9fa6", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.3.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/proto/otlp", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.3.1" }, { "SPDXID": "SPDXRef-7aa394e6-fc06-42bc-ba1f-e4892e836464", "description": "This package is currently in development and the API may not be stable", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/google/uuid", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.6.0" }, { "SPDXID": "SPDXRef-5bdca802-f9a1-4b2a-a3c0-e5aa847bd980", "description": "A Commander for modern go CLI interactions\n\nCobra provides a simple interface to create powerful modern CLI\ninterfaces similar to git & go tools", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.8.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/spf13/cobra", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.8.1" }, { "SPDXID": "SPDXRef-a547d8cc-5aef-40f7-bc82-38bda952e1c7", "description": "gRPC to JSON proxy generator following the gRPC HTTP spec\n\nThe gRPC-Gateway is a plugin of the Google protocol buffers compiler\nprotoc", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.20.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/grpc-ecosystem/grpc-gateway/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.20.0" }, { "SPDXID": "SPDXRef-52c8876f-1e25-45a7-8aae-341e53adf006", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/platforms@v0.2.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/platforms", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.2.1" }, { "SPDXID": "SPDXRef-d1e9db0c-e461-471c-b3b3-aaf3a0662bfd", "description": "aws-sdk-go-v2 is the v2 AWS SDK for the Go programming language", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.24.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.24.1" }, { "SPDXID": "SPDXRef-417fa026-90be-4baf-b0d8-75a7ce68b34f", "description": "Go clients for talking to a kubernetes cluster", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/k8s.io/client-go@v0.29.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "k8s.io/client-go", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.29.2" }, { "SPDXID": "SPDXRef-1431cf93-ce95-47e3-9590-c2e26328bfa3", "description": "This repository provides supplementary Go time packages", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/time@v0.6.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/time", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.6.0" }, { "SPDXID": "SPDXRef-47e291a3-719c-4b15-ba7c-530ef373f3fc", "description": "OpenTelemetry-Go is the Go implementation of OpenTelemetry", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" }, { "SPDXID": "SPDXRef-e531f346-030e-420b-8228-be1e90efc4d1", "description": "This repository provides Go terminal and console support packages", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/term@v0.24.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/term", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.24.0" }, { "SPDXID": "SPDXRef-ff04a7ef-4068-4932-a6c6-a94e158bb6e0", "description": "oauth2 package contains a client implementation for OAuth 2", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/oauth2@v0.21.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/oauth2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.21.0" }, { "SPDXID": "SPDXRef-68769b4e-7420-427e-b736-17d66349c2d0", "description": "Moby is an open-source project created by Docker to enable and accelerate software containerization", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/docker@v27.4.0-rc.2%2Bincompatible", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/docker/docker", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v27.4.0-rc.2+incompatible" }, { "SPDXID": "SPDXRef-db90556c-b888-4415-8a1b-cc7dfc0a967b", "description": "A Go package for managing the registration, marshaling, and unmarshaling of encoded types", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/typeurl/v2@v2.2.3", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/typeurl/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.2.3" }, { "SPDXID": "SPDXRef-6694e9d1-f6d0-4e2d-9557-dbf3b9930d0f", "description": "Package otelhttp provides an http", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.53.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.53.0" }, { "SPDXID": "SPDXRef-e78eb5c5-9a3c-4ccb-8452-eaca9cc1bb0b", "description": "mapstructure is a Go library for decoding generic map values to structures\nand vice versa, while providing helpful error handling", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.0.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/go-viper/mapstructure/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.0.0" }, { "SPDXID": "SPDXRef-52051700-7bcc-49c3-a997-5a4368212433", "description": "kubernetes-sigs/yaml is a permanent fork of ghodss/yaml", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/sigs.k8s.io/yaml@v1.3.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new AND mit", "name": "sigs.k8s.io/yaml", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.3.0" }, { "SPDXID": "SPDXRef-d84ebb95-ca30-45a4-9c19-d05ade3c9f8b", "description": "hashstructure is a Go library for creating a unique hash value\nfor arbitrary values in Go", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/mitchellh/hashstructure/v2@v2.0.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/mitchellh/hashstructure/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.0.2" }, { "SPDXID": "SPDXRef-6f5d7500-cefb-480c-8db2-e8cb6406b7a6", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/spdystream@v0.2.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/spdystream", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.2.0" }, { "SPDXID": "SPDXRef-5b25301b-5c16-472a-bee5-039a1b40de50", "description": "errwrap is a package for Go that formalizes the pattern of wrapping errors\nand checking if an error contains another error", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mpl-2.0", "name": "github.com/hashicorp/errwrap", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.1.0" }, { "SPDXID": "SPDXRef-5bf02889-4473-4304-b1b2-2bf2f106f13c", "description": "Go library to handle references to container images", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/distribution/reference@v0.6.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/distribution/reference", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.6.0" }, { "SPDXID": "SPDXRef-709dd50c-8f39-43f4-92c8-4a4c88329f4f", "description": "This directory contains the GRPC API definitions for containerd", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/containerd/api@v1.7.19", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/containerd/api", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.7.19" }, { "SPDXID": "SPDXRef-c467ad0a-4e8e-4f00-bb95-2a46c0ba76d1", "description": "StopSignal will not be recovered, will propagate to upper level goroutine\n\nGlobalUnboundedExecutor has the life cycle of the program itself\nany goroutine want to be shutdown before main exit can be started from this executor\nGlobalUnboundedExecutor expects the main function to call stop\nit does not magically knows the main function exits\n\nLogInfo logs informational message, for example\nwhich goroutine is still alive preventing the executor shutdown\n\nLogPanic logs goroutine panic\n\nThis section is empty", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/modern-go/concurrent", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20180306012644-bacd9c7ef1dd" }, { "SPDXID": "SPDXRef-8fda4791-1612-45d4-a3ac-90fbb273fcca", "description": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/buildkit@v0.18.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/buildkit", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.18.0" }, { "SPDXID": "SPDXRef-d769c40e-b341-4280-a08d-345673e0be10", "description": "go-multierror is a package for Go that provides a mechanism for\nrepresenting a list of error values as a single error", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mpl-2.0", "name": "github.com/hashicorp/go-multierror", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.1.1" }, { "SPDXID": "SPDXRef-426a80cd-f16f-4849-9659-5c71819d83fd", "description": "Package ini implements parsing of the AWS shared config file", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/ini@v1.7.3", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/internal/ini", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.7.3" }, { "SPDXID": "SPDXRef-ac18fb5d-1d47-4d1d-b55f-0938e95a556e", "description": "Smithy code generators for Go and the accompanying smithy-go runtime", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/smithy-go@v1.19.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/smithy-go", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.19.0" }, { "SPDXID": "SPDXRef-967289e6-1e59-4af6-ae4b-db3c1dc01141", "description": "Package acceptencoding provides customizations associated with Accept Encoding Header", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.10.4", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.10.4" }, { "SPDXID": "SPDXRef-a2dabd69-d1c2-42dc-b780-97bbf9ba98fc", "description": "Package ssooidc provides the API client, operations, and parameter types for\nAWS SSO OIDC", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.21.7", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.21.7" }, { "SPDXID": "SPDXRef-f19d7798-6701-490a-bcd0-5b8e43c293ee", "description": "This repository contains Go libraries that are shared across Prometheus\ncomponents and libraries", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/prometheus/common@v0.55.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/prometheus/common", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.55.0" }, { "SPDXID": "SPDXRef-9b327ec9-41d7-4c01-9941-27a4633d9972", "description": "This directory contains documents about Docker Image Specification v1", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/docker-image-spec", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.3.1" }, { "SPDXID": "SPDXRef-39cd9871-a857-47a6-be0b-179e3093d0eb", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.6", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/go-openapi/jsonpointer", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.19.6" }, { "SPDXID": "SPDXRef-05586f00-106a-4f60-95da-cf0d9774e711", "description": "The Docker toolset to pack, ship, store, and deliver content", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/distribution@v2.8.3%2Bincompatible", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/docker/distribution", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.8.3+incompatible" }, { "SPDXID": "SPDXRef-5613a439-824d-4db0-82cb-fb9368c83898", "description": "Package presignedurl provides the customizations for API clients to fill in\npresigned URLs into input parameters", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.10.10", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.10.10" }, { "SPDXID": "SPDXRef-2760ddcd-6ea5-46ca-8de4-16576734df47", "description": "Package sts provides the API client, operations, and parameter types for AWS\nSecurity Token Service", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.26.7", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/service/sts", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.26.7" }, { "SPDXID": "SPDXRef-10e81479-91a2-4ff0-8a04-208957bf8fd7", "description": "klog is a permanent fork of https://github", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/k8s.io/klog/v2@v2.110.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "k8s.io/klog/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.110.1" }, { "SPDXID": "SPDXRef-a1953522-f63e-44b7-bc1d-6efd7aa1da68", "description": "WARNING(2023-05-26): New submodules: upgrade before 2024-03-01 to avoid\nambiguous import errors with\ngoogle", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/google.golang.org/genproto@v0.0.0-20240123012728-ef4313101c80", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "google.golang.org/genproto", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20240123012728-ef4313101c80" }, { "SPDXID": "SPDXRef-c247e9df-687d-46c6-9509-1313dd14cf31", "description": "(If you are reading this because you are interested in Prometheus's native\nhistograms, pay special attention to the last paragraph below", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/prometheus/client_model@v0.6.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/prometheus/client_model", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.6.1" }, { "SPDXID": "SPDXRef-47e3cbb0-1958-42ca-a62e-12bf4d9f42c1", "description": "Package shlex implements a simple lexer which splits input in to tokens usingshell-style rules for quoting and commenting", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/google/shlex@v0.0.0-20191202100458-e7afc7fbc510", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/google/shlex", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20191202100458-e7afc7fbc510" }, { "SPDXID": "SPDXRef-3b975716-888a-4611-bf0c-2ea83c94668d", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/log@v0.1.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/log", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.1.0" }, { "SPDXID": "SPDXRef-7d2f0306-cec6-476e-8774-2c3f0595e1cf", "description": "This repository holds supplemental Go packages for low-level interactions with\nthe operating system", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.26.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/sys", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.26.0" }, { "SPDXID": "SPDXRef-7eee6628-276e-4cbf-a339-12d38a75f9ea", "description": "This package provides functions to retrieve system, kernel, and process\nmetrics from the pseudo-filesystems /proc and /sys", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/prometheus/procfs@v0.15.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/prometheus/procfs", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.15.1" }, { "SPDXID": "SPDXRef-aec30e20-668a-4567-b358-b2b638377c80", "description": "A library that provides cryptographic and general-purpose functions for Go\nSecure Systems Lab projects at NYU", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.4.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/secure-systems-lab/go-securesystemslib", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.4.0" }, { "SPDXID": "SPDXRef-e521c5ef-7db7-42ad-a0c1-119169c33f0c", "description": "This section is empty", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/patternmatcher@v0.6.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/patternmatcher", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.6.0" }, { "SPDXID": "SPDXRef-1234a566-707f-4329-87b2-9ae618b28262", "description": "Package sso provides the API client, operations, and parameter types for AWS\nSingle Sign-On", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.18.7", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/service/sso", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.18.7" }, { "SPDXID": "SPDXRef-a2f2e4c8-d2fa-4d17-bb14-b6b0ee20264a", "description": "Package config provides utilities for loading configuration from multiple\nsources that can be used to configure the SDK's API clients, and utilities", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.26.6", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/config", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.26.6" }, { "SPDXID": "SPDXRef-a71487ff-28ae-4014-ab9e-2931f600d429", "description": "Package otlptracehttp provides an OTLP span exporter using HTTP with protobuf payloads", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" }, { "SPDXID": "SPDXRef-abe249c0-91c0-4ed8-98c6-517e253de8b5", "description": "Package otlpmetrichttp provides an OTLP metrics exporter using HTTP with protobuf payloads", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v0.44.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.44.0" }, { "SPDXID": "SPDXRef-03072342-87ef-4fd4-a8fc-19387b4d04d3", "description": "An implementation of JSON Schema, based on IETF's draft v4 - Go language\nReferences :\nDependencies :\nThere are various ways to load your JSON data", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/xeipuuv/gojsonschema", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.2.0" }, { "SPDXID": "SPDXRef-904560dd-7093-42ad-8b2a-558d04055652", "description": "Go code (golang) set of packages that provide many tools for testifying that your code will behave as you intend", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/stretchr/testify@v1.9.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/stretchr/testify", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.9.0" }, { "SPDXID": "SPDXRef-042be5a9-2790-4960-8023-6d2a6e366036", "description": "reflect api that avoids runtime reflect", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/modern-go/reflect2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.2" }, { "SPDXID": "SPDXRef-acf81434-73c8-494f-ab92-e703cc824aaa", "description": "Package httpsnoop provides an easy way to capture http related metrics (i", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/felixge/httpsnoop", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.4" }, { "SPDXID": "SPDXRef-0c1b541d-66c6-477b-add5-c1570f3e3f41", "description": "GRPC for low-memory environments", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/ttrpc@v1.2.5", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/ttrpc", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.2.5" }, { "SPDXID": "SPDXRef-55e0b53a-b806-4a67-be28-f9d34f921339", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20240701130421-f6361c86f094", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "google.golang.org/genproto/googleapis/rpc", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20240701130421-f6361c86f094" }, { "SPDXID": "SPDXRef-d36b3242-1147-4a4f-9e95-91b2f9eeb30c", "description": "Package trace provides an implementation of the tracing part of the\nOpenTelemetry API", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/trace", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" }, { "SPDXID": "SPDXRef-3109bc63-87ee-409e-ab50-6a36e6d3cb50", "description": "Google's data interchange format", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/golang/protobuf@v1.5.4", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/golang/protobuf", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.5.4" }, { "SPDXID": "SPDXRef-b69770fa-0967-479c-84b4-0799590c21e2", "description": "This repository contains Protocol Buffer models and associated libraries\nfor working with API description formats supported by\ngnostic", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/google/gnostic-models@v0.6.8", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/google/gnostic-models", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.6.8" }, { "SPDXID": "SPDXRef-ff2075b4-697a-4a0a-bbdd-9d0825640e4c", "description": "The Go implementation of gRPC: A high performance, open source, general\nRPC framework that puts mobile and HTTP/2 first", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.66.3", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "google.golang.org/grpc", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.66.3" }, { "SPDXID": "SPDXRef-762f89b9-fa1d-4934-9b68-a754790f01f1", "description": "This repo is the home for Kubernetes OpenAPI discovery spec generation", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20231010175941-2dd684a91f00", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "k8s.io/kube-openapi", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20231010175941-2dd684a91f00" }, { "SPDXID": "SPDXRef-79d998be-fc90-4f30-9d23-bfd0f2a4ae0b", "description": "An implementation of JSON Reference - Go languag", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/xeipuuv/gojsonreference", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20180127040603-bd5ef7bd5415" }, { "SPDXID": "SPDXRef-86707d47-7a72-4045-8d2b-78f353d97c49", "description": "go-csvvalue provides an efficient parser for a single-line CSV value", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/tonistiigi/go-csvvalue@v0.0.0-20240710180619-ddb21b71c0b4", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/tonistiigi/go-csvvalue", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20240710180619-ddb21b71c0b4" }, { "SPDXID": "SPDXRef-3b9eff2a-8567-4660-9e4b-ebc13bec3e28", "description": "pflag is a drop-in replacement for Go's flag package, implementing\nPOSIX/GNU-style --flags", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.5", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/spf13/pflag", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.5" }, { "SPDXID": "SPDXRef-e18b7785-e655-4201-b5bc-1b453c769f71", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/opencloudos/docker-buildx-plugin@0.19.3-1?distro_version=9", "referenceType": "purl" } ], "filesAnalyzed": true, "name": "opencloudos/docker-buildx-plugin", "primaryPackagePurpose": "LIBRARY", "versionInfo": "0.19.3-1" }, { "SPDXID": "SPDXRef-e9bf8f24-7453-43c1-bbe5-1df15e4e9ab1", "description": "Package metric provides an implementation of the OpenTelemetry metrics SDK", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/sdk/metric", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" }, { "SPDXID": "SPDXRef-d8107dc2-e92b-4834-af22-6683dda99e3f", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/tonistiigi/dchapes-mode@v0.0.0-20241001053921-ca0759fec205", "referenceType": "purl" } ], "filesAnalyzed": true, "name": "github.com/tonistiigi/dchapes-mode", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20241001053921-ca0759fec205" }, { "SPDXID": "SPDXRef-15acddcd-17f2-4a9b-8c00-a6389607f0e7", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", "referenceType": "purl" } ], "filesAnalyzed": true, "name": "github.com/munnerz/goautoneg", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20191010083416-a7dc8b61c822" }, { "SPDXID": "SPDXRef-2054c3c9-da72-4469-ad56-ce4108e86f37", "description": "Go implementation of the\nin-toto specification", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/in-toto/in-toto-golang@v0.5.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/in-toto/in-toto-golang", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.5.0" }, { "SPDXID": "SPDXRef-f4ac267f-18f0-4349-b5c3-900d0595ddac", "description": "Package credentials provides types for retrieving credentials from credentials sources", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.16.16", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/credentials", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.16.16" } ], "relationships": [ { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-c247e9df-687d-46c6-9509-1313dd14cf31", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-edeee15f-4557-4525-91a1-ec3e43fc9065", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-833acfb7-deeb-42a3-af0f-e48b39f12e1f", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-1f0d1d9b-97ad-4cf5-9707-9065052630fd", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-3c6ccea9-5a68-4081-a656-6285708ee52e", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-47e3cbb0-1958-42ca-a62e-12bf4d9f42c1", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-e78eb5c5-9a3c-4ccb-8452-eaca9cc1bb0b", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-ff04a7ef-4068-4932-a6c6-a94e158bb6e0", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-a71487ff-28ae-4014-ab9e-2931f600d429", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-787bae2b-2f26-46d9-b5ed-0cad625cc49e", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-ff2075b4-697a-4a0a-bbdd-9d0825640e4c", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-d84ebb95-ca30-45a4-9c19-d05ade3c9f8b", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-e9e39ee4-a834-4b07-b921-3d14d412461a", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-aef6a7e1-3aa4-4853-95a0-28276f356834", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-3e878a25-66dd-49a8-84cb-7d0c2c589c64", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-6f5d7500-cefb-480c-8db2-e8cb6406b7a6", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-cf7a4c04-0632-4058-a2b8-41640fc8c27a", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-86707d47-7a72-4045-8d2b-78f353d97c49", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-062dec50-8bfe-4244-807a-36384d7e9fa6", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-eae2c394-2272-45f9-9997-a4caca868c06", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-2309c779-f966-4291-9f1c-14919768f710", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-2054c3c9-da72-4469-ad56-ce4108e86f37", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-7aa394e6-fc06-42bc-ba1f-e4892e836464", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-a2dabd69-d1c2-42dc-b780-97bbf9ba98fc", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-f35638d2-8f29-4eb5-b3af-639ad85a715a", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-7eee6628-276e-4cbf-a339-12d38a75f9ea", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-72753e21-f3a1-42e8-aeee-918fa412b621", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-417fa026-90be-4baf-b0d8-75a7ce68b34f", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-4a94d2be-7e11-4e33-bace-7c566acf44eb", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-3a442d28-fcdb-4198-93a4-54e6c5269e4e", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-63bfb198-798b-4723-9a70-b7b143349773", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-042be5a9-2790-4960-8023-6d2a6e366036", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-92b57bc6-987b-40da-951c-e1d52da36b7a", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-db90556c-b888-4415-8a1b-cc7dfc0a967b", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-8d0b5c81-2ebe-4484-b448-45c763dd02c2", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-709dd50c-8f39-43f4-92c8-4a4c88329f4f", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-6e715268-b4a4-4a6c-810d-3e6ca86e4beb", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-967289e6-1e59-4af6-ae4b-db3c1dc01141", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-9f3127a4-b9e6-4fc2-bbec-4d5acc8d5b34", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-15acddcd-17f2-4a9b-8c00-a6389607f0e7", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-ef065958-6e4c-4af0-8304-9d621acba956", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-670ae066-d8ba-490d-a77a-230756b553a7", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-52c8876f-1e25-45a7-8aae-341e53adf006", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-39cd9871-a857-47a6-be0b-179e3093d0eb", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-68769b4e-7420-427e-b736-17d66349c2d0", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-6c5024c6-608e-460f-8869-3b3bef57d272", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-098842ee-8e51-4dd4-846e-51e018a12ad9", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-198d9ad2-e40f-4770-9c50-3a9b0e6c6941", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-03072342-87ef-4fd4-a8fc-19387b4d04d3", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-a1423176-6b9d-4ff4-830e-5de6477b5fd7", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-32429248-3fc2-4f9f-a6c4-58c8cff8a2d9", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-0c1b541d-66c6-477b-add5-c1570f3e3f41", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-e18b7785-e655-4201-b5bc-1b453c769f71", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-d1e9db0c-e461-471c-b3b3-aaf3a0662bfd", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-fdb78ca5-ff80-4296-8723-265f85ea49bd", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-e9bf8f24-7453-43c1-bbe5-1df15e4e9ab1", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-dd386261-c1d3-4da9-8eac-1ba89beaf958", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-2f71d038-d08f-4785-8860-cddf8c004f83", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-6ff38f5d-b181-4b0c-9687-85833b956ff4", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-8ace94cb-a6e3-460e-a342-d7d8097a7880", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-5a429862-d4e0-480b-93a9-379b0c0ca303", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-b69770fa-0967-479c-84b4-0799590c21e2", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-aec30e20-668a-4567-b358-b2b638377c80", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-6b62b97d-075a-4627-b18c-b6b1f0daaa51", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-4a44fb6e-5208-4374-b05a-3f793706131e", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-fd88748f-325f-4f98-8d86-177cc04f1e10", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-8fda4791-1612-45d4-a3ac-90fbb273fcca", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-f07fa0c7-9383-4813-82ee-5acbef255031", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-a2f2e4c8-d2fa-4d17-bb14-b6b0ee20264a", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-2760ddcd-6ea5-46ca-8de4-16576734df47", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-05586f00-106a-4f60-95da-cf0d9774e711", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-6e3eb099-d47f-4b60-bc9e-f8915fe08263", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-904560dd-7093-42ad-8b2a-558d04055652", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-7242c22c-3c24-4673-8b54-3b69b87f5e92", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-3109bc63-87ee-409e-ab50-6a36e6d3cb50", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-f74b8cb8-8643-4246-9375-668d3f23ea15", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-a1953522-f63e-44b7-bc1d-6efd7aa1da68", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-f85e8126-f338-4d75-b6ca-52a2081ec2d3", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-62c4389b-ae13-443a-abee-dd2adea40cf9", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-47e291a3-719c-4b15-ba7c-530ef373f3fc", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-059bcccd-0fcc-4a58-b479-9bbfd02bb419", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-ac08ea79-5305-475c-9094-ba23f69532b4", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-b901a9d3-463e-426e-a598-8aafa3c10a84", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-762f89b9-fa1d-4934-9b68-a754790f01f1", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-3b697566-0a2a-4442-9dba-d724cfd81636", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-a547d8cc-5aef-40f7-bc82-38bda952e1c7", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-6bdbad37-cdd8-493b-ad6d-f23e396dd65a", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-6694e9d1-f6d0-4e2d-9557-dbf3b9930d0f", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-d8107dc2-e92b-4834-af22-6683dda99e3f", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-f4ac267f-18f0-4349-b5c3-900d0595ddac", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-6565829a-2f1f-4161-bf88-21e0e346f607", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-55e0b53a-b806-4a67-be28-f9d34f921339", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-ac18fb5d-1d47-4d1d-b55f-0938e95a556e", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-5613a439-824d-4db0-82cb-fb9368c83898", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-f19d7798-6701-490a-bcd0-5b8e43c293ee", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-ea61a91d-ab23-4600-b684-5281c741c0cd", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-d36b3242-1147-4a4f-9e95-91b2f9eeb30c", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-10e81479-91a2-4ff0-8a04-208957bf8fd7", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-93279a26-a1eb-4cc4-b93f-2318718e1abf", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-c467ad0a-4e8e-4f00-bb95-2a46c0ba76d1", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-fc2aaced-d0d4-4864-8d8e-890402754ad5", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-30cea2d4-0cf8-410a-bf0a-39ba039e6635", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-52051700-7bcc-49c3-a997-5a4368212433", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-8ed698d3-1b45-4ffb-be3a-e0bacb367a9e", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-1487ea7a-9731-44d4-87ff-206344ec9d58", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-9fce4863-1414-4b28-bd9f-7eeacb6bbdfc", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-426a80cd-f16f-4849-9659-5c71819d83fd", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-2828d7bf-1bfc-4ecc-a521-14a43c850acc", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-d719358f-e4c1-477d-bbcc-cd15dc8f4d5c", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-c330b826-8a1f-4097-afe8-87b7f886b494", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-abe249c0-91c0-4ed8-98c6-517e253de8b5", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-179d9104-ef51-449d-879d-97435f415b29", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-13edc2bc-3b53-426c-b6d4-4dba94ef23e0", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-b11e03e0-5fd4-4ce7-88be-827334b49f5d", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-37169141-6c28-450b-8e7a-15b0ac368da7", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-46c4d2b8-8344-4606-a80c-e3dfa24a48d0", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-a4fb11f1-8140-47f0-a5c8-afe4c40425bb", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-21077329-c038-4761-ab43-865db3b04b78", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-7d2f0306-cec6-476e-8774-2c3f0595e1cf", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-5bdca802-f9a1-4b2a-a3c0-e5aa847bd980", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-d769c40e-b341-4280-a08d-345673e0be10", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-5bf02889-4473-4304-b1b2-2bf2f106f13c", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-53f3aabe-297e-4ae4-ab3f-e8079672485f", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-31b2b0a9-fc39-436c-bb7d-dcf379a9285c", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-4b7457cd-7b93-4029-814b-31e3c5e5e572", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-b90bdee3-6305-456f-addc-f24a6d1f1a50", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-eec92362-5043-49af-9b0b-46d58e3a9c33", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-ff778083-1583-4e0f-ba81-9b3d6cd639b7", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-71015480-6820-484d-a4e7-a334749c1d8a", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-9de9b058-78a8-4bd4-9473-848128830244", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-9b327ec9-41d7-4c01-9941-27a4633d9972", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-ac59aa54-a397-4ad4-896b-d3df22253cd6", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-79d998be-fc90-4f30-9d23-bfd0f2a4ae0b", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-ce6a71c0-2901-4806-8b7f-6b2f98130034", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-4cd17559-dfe6-40e2-97f6-fc68c829f1a7", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-ad72448d-0d19-43e7-b0be-cd4eabd26e18", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-850cce87-60b3-4500-a826-f3e2e8070650", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-2d73c40e-38bd-4a82-8eaa-2b3df5833752", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-bb45f08c-eee8-45a3-9b5f-89cf6fc11f46", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-f5c1a818-47ba-4995-8ee5-dacdfa73b747", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-3b975716-888a-4611-bf0c-2ea83c94668d", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-acf81434-73c8-494f-ab92-e703cc824aaa", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-5b25301b-5c16-472a-bee5-039a1b40de50", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-c3cb77e6-3d4e-4e84-87ce-df41254a4526", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-1234a566-707f-4329-87b2-9ae618b28262", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-e782f9f0-3cf5-430a-88c1-3eb83d5dd028", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-7963dd0a-3865-4fcb-a3cb-ef77ccd2c731", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-7748f5a1-1e24-44ec-8aef-c06e931a13d0", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-8e1ffa64-0166-43ad-ab93-153fcb9c6e7b", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-1431cf93-ce95-47e3-9590-c2e26328bfa3", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-e531f346-030e-420b-8228-be1e90efc4d1", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-f3af05fc-d5e3-4683-8484-e8a87a9823d7", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-cefd7719-a732-403f-89b1-5f6dde3bcf24", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-3b9eff2a-8567-4660-9e4b-ebc13bec3e28", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-78918510-6537-48da-ac15-d7a7b54a33d9", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-d241bb3c-a8d8-428d-b6f2-011cf47798a3", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-2faec678-4847-4a21-850c-15ffa1f97675", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-e521c5ef-7db7-42ad-a0c1-119169c33f0c", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-8b345e70-83bf-4089-8c9f-d93b25f742cb", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-8edeeb8d-1cec-43ea-809b-2f9a9b15f12a", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-aa959de3-a42e-43cb-9680-7fee7c64e45c", "relationshipType": "DESCRIBES" } ] }