{ "SPDXID": "SPDXRef-DOCUMENT", "creationInfo": { "created": "2025-03-19T11:02:51Z", "creators": [ "Organization: keenlab", "Tool: ksas" ], "comment": "Generated by keenlab ksas at 2025-03-19T11:02:51Z" }, "dataLicense": "CC0-1.0", "name": "", "spdxVersion": "SPDX-2.3", "documentNamespace": "https://console.cloud.tencent.com/bsca/spdx/-7a461dd6-7187-427d-9d46-d25287495eed", "packages": [ { "SPDXID": "SPDXRef-c2ff6b10-5523-45e8-9612-041baaa6d912", "description": "Go implementation of the\nin-toto specification", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/in-toto/in-toto-golang@v0.5.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/in-toto/in-toto-golang", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.5.0" }, { "SPDXID": "SPDXRef-54a1e25a-1d74-40eb-bbe2-a75ce13a5488", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/platforms@v0.2.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/platforms", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.2.1" }, { "SPDXID": "SPDXRef-3d599618-dac5-4d7c-8ccd-7d47ac7ea827", "description": "This is a Go port of the exponential backoff algorithm from Google's HTTP Client Library for Java", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/cenkalti/backoff/v4", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v4.3.0" }, { "SPDXID": "SPDXRef-9680651c-0b9a-42d2-8ce3-969b1bb80405", "description": "A library for building interactive prompts", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/alecaivazis/survey/v2@v2.3.7", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/alecaivazis/survey/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.3.7" }, { "SPDXID": "SPDXRef-db37fdbc-62c4-43d8-b95a-d4ca5e0d3d60", "description": "Package sts provides the API client, operations, and parameter types for AWS\nSecurity Token Service", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.26.7", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/service/sts", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.26.7" }, { "SPDXID": "SPDXRef-1b90cc6a-bc47-4f13-9a1f-b2f2dce43bb5", "description": "Package ini implements parsing of the AWS shared config file", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/ini@v1.7.3", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/internal/ini", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.7.3" }, { "SPDXID": "SPDXRef-debfbbdc-0920-4c03-b40e-d881945836c1", "description": "package for building REST-style Web Services using Google Go\n\n\n\nREST asks developers to use HTTP methods explicitly and in a way that's consistent with the protocol definition", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/emicklei/go-restful/v3@v3.11.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/emicklei/go-restful/v3", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v3.11.0" }, { "SPDXID": "SPDXRef-dceca663-b857-4fe4-8171-ee62ce0fd550", "description": "Package trace provides an implementation of the tracing part of the\nOpenTelemetry API", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/trace", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" }, { "SPDXID": "SPDXRef-b4c7bca5-873f-4dd4-a340-4c5c5fa1c918", "description": "This is the Go client library for\nPrometheus", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/prometheus/client_golang@v1.20.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/prometheus/client_golang", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.20.2" }, { "SPDXID": "SPDXRef-41c499c9-bb83-4b3e-9ee2-0889d0fffbf8", "description": "Common digest package used across the container ecosystem", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0 AND cc-by-sa-4.0", "name": "github.com/opencontainers/go-digest", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.0" }, { "SPDXID": "SPDXRef-f60c5c10-ef14-4502-ac43-d4787c9c5bfb", "description": "flock implements a thread-safe sync", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/gofrs/flock@v0.12.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/gofrs/flock", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.12.1" }, { "SPDXID": "SPDXRef-d0286ee3-c95d-4da8-a05b-9d3fefaf8446", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/pelletier/go-toml@v1.9.5", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0 AND mit", "name": "github.com/pelletier/go-toml", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.9.5" }, { "SPDXID": "SPDXRef-883e55b9-2143-44ba-a22e-6f8be019078e", "description": "ScopeName is the instrumentation scope name", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.53.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.53.0" }, { "SPDXID": "SPDXRef-8c27349a-9091-4940-8fdf-bdcf1b9d327a", "description": "hashstructure is a Go library for creating a unique hash value\nfor arbitrary values in Go", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/mitchellh/hashstructure/v2@v2.0.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/mitchellh/hashstructure/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.0.2" }, { "SPDXID": "SPDXRef-23f809bd-b76d-4449-92e4-6fe07f4eb209", "description": "This repository is the home of the Docker CLI", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/cli@v27.4.0%2Bincompatible", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/docker/cli", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v27.4.0+incompatible" }, { "SPDXID": "SPDXRef-0eba1c13-6d32-4292-b47c-3af8b744b362", "description": "This repository holds supplementary Go networking packages", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/net@v0.29.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/net", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.29.0" }, { "SPDXID": "SPDXRef-4f0c2175-2ee0-4964-9e4f-1347740dabd5", "description": "Go code (golang) set of packages that provide many tools for testifying that your code will behave as you intend", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/stretchr/testify@v1.10.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/stretchr/testify", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.10.0" }, { "SPDXID": "SPDXRef-1605c708-f14e-4e11-8595-56f9b620ae57", "description": "A library that provides cryptographic and general-purpose functions for Go\nSecure Systems Lab projects at NYU", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.4.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/secure-systems-lab/go-securesystemslib", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.4.0" }, { "SPDXID": "SPDXRef-8cd6c42d-db90-41f6-9a9d-0c2c27b33828", "description": "Incremental file directory sync tools in golang", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/tonistiigi/fsutil@v0.0.0-20241121093142-31cf1f437184", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/tonistiigi/fsutil", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20241121093142-31cf1f437184" }, { "SPDXID": "SPDXRef-1ff53f8a-ea34-4f47-ba90-11bdfb89aa0b", "description": "isatty for golang\nMIT\nYasuhiro Matsumoto (a", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/mattn/go-isatty@v0.0.17", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/mattn/go-isatty", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.17" }, { "SPDXID": "SPDXRef-5214ee12-2562-4099-b84a-773c198f619f", "description": "Go reference library for parsing and loading Compose files as specified by the\nCompose specification", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/compose-spec/compose-go/v2@v2.4.6", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/compose-spec/compose-go/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.4.6" }, { "SPDXID": "SPDXRef-028ff110-286e-490c-b4e5-0e67477b1ce3", "description": "This Go package removes ANSI escape codes from strings", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/acarl005/stripansi@v0.0.0-20180116102854-5a71ef0e047d", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/acarl005/stripansi", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20180116102854-5a71ef0e047d" }, { "SPDXID": "SPDXRef-df5f3fae-ed68-4c4d-8066-8abd9d62ede5", "description": "The semver package provides the ability to work with Semantic Versions in Go", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/masterminds/semver/v3@v3.2.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/masterminds/semver/v3", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v3.2.1" }, { "SPDXID": "SPDXRef-897823ec-a4af-4ae8-8ed0-1527a0018d70", "description": "This repository provides supplementary Go time packages", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/time@v0.6.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/time", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.6.0" }, { "SPDXID": "SPDXRef-9772aee2-e3b0-495b-a9fa-cea7004995dc", "description": "oauth2 package contains a client implementation for OAuth 2", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/oauth2@v0.23.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/oauth2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.23.0" }, { "SPDXID": "SPDXRef-13a04dc0-c870-40d1-bf10-c5dcbdf29da8", "description": "Package mountinfo provides a set of functions to retrieve information about OS mounts", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/sys/mountinfo@v0.7.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/sys/mountinfo", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.7.2" }, { "SPDXID": "SPDXRef-c2cf1ca9-67cb-4121-b7b7-cd2f9a1a8d71", "description": "A transport-agnostic, filesystem metadata manifest system\nThis project is a staging area for experiments in providing transport agnostic\nmetadata storage", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/continuity@v0.4.5", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/continuity", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.4.5" }, { "SPDXID": "SPDXRef-c35c623b-5e80-4700-a00e-00ca01ef7ab4", "description": "This section is empty", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/sys/user@v0.3.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/sys/user", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.3.0" }, { "SPDXID": "SPDXRef-5e9fc214-c1dd-4ed6-bdf1-6d03027d196a", "description": "Package symlink implements FollowSymlinkInScope which is an extension\nof path/filepath", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/sys/symlink@v0.2.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/sys/symlink", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.2.0" }, { "SPDXID": "SPDXRef-65f9c470-d865-4c4e-8e51-a6387061124f", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/mattn/go-colorable@v0.1.13", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/mattn/go-colorable", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.1.13" }, { "SPDXID": "SPDXRef-dc98be51-c018-4122-ad19-3f438f626b2d", "description": "This repository contains Protocol Buffer models and associated libraries\nfor working with API description formats supported by\ngnostic", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/google/gnostic-models@v0.6.8", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/google/gnostic-models", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.6.8" }, { "SPDXID": "SPDXRef-927b4ae6-1d9b-460d-8ac2-860676212997", "description": "An implementation of JSON Pointer - Go languag", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/xeipuuv/gojsonpointer", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20190905194746-02993c407bfb" }, { "SPDXID": "SPDXRef-3ffc0f4d-32b3-47db-8941-eee9a2b7475a", "description": "This package provides functions to retrieve system, kernel, and process\nmetrics from the pseudo-filesystems /proc and /sys", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/prometheus/procfs@v0.15.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/prometheus/procfs", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.15.1" }, { "SPDXID": "SPDXRef-d34617c3-0705-4ec5-b71d-2685df0e214c", "description": "This Go package implements Unicode Text Segmentation according to Unicode Standard Annex #29 (Unicode version 12", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/rivo/uniseg@v0.2.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/rivo/uniseg", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.2.0" }, { "SPDXID": "SPDXRef-fa537e70-0eff-4bd2-8391-55de6b17a653", "description": "http://godoc", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/skratchdot/open-golang@v0.0.0-20200116055534-eef842397966", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/skratchdot/open-golang", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20200116055534-eef842397966" }, { "SPDXID": "SPDXRef-9c0b8229-0023-4b17-8ec9-ad01481c4dc5", "description": "This repository provides the protoc-gen-go-vtproto plug-in for protoc, which is used by Vitess to generate optimized marshall & unmarshal code", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/planetscale/vtprotobuf", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.6.1-0.20240319094008-0393e58bdf10" }, { "SPDXID": "SPDXRef-c0191da2-660c-4e0e-b129-061ccd5d47ce", "description": "Package userns provides utilities to detect whether we are currently running\nin a Linux user namespace", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/sys/userns@v0.1.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/sys/userns", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.1.0" }, { "SPDXID": "SPDXRef-09bfdba2-27cc-4f08-a459-fcfec5bf4846", "description": "Package signal provides helper functions for dealing with signals across\nvarious operating systems", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/sys/signal@v0.7.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/sys/signal", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.7.1" }, { "SPDXID": "SPDXRef-f4529027-4152-4266-b034-32f40aa3c0a7", "description": "This package is small wrapper around the prometheus go client to help enforce convention and best practices for metrics collection in Docker projects", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/go-metrics@v0.0.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0 AND cc-by-sa-4.0", "name": "github.com/docker/go-metrics", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.1" }, { "SPDXID": "SPDXRef-c74f70a0-6763-4cb9-a6cb-7264abb58fce", "description": "A set of Go libraries that provide low-level, kubernetes-independent packages\nsupplementing the Go standard libs", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/k8s.io/utils@v0.0.0-20230726121419-3b25d923346b", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "k8s.io/utils", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20230726121419-3b25d923346b" }, { "SPDXID": "SPDXRef-3afb5a31-4a0e-43d5-8a14-28e4f7479139", "description": "Scheme, typing, encoding, decoding, and conversion packages for Kubernetes and Kubernetes-like API objects", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/k8s.io/apimachinery@v0.29.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "k8s.io/apimachinery", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.29.2" }, { "SPDXID": "SPDXRef-7704f796-abf1-44c1-a697-92fbb4f93ec1", "description": "WARNING(2023-05-26): New submodules: upgrade before 2024-03-01 to avoid\nambiguous import errors with\ngoogle", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/google.golang.org/genproto@v0.0.0-20240123012728-ef4313101c80", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "google.golang.org/genproto", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20240123012728-ef4313101c80" }, { "SPDXID": "SPDXRef-5c54d00a-4a9f-4143-b7ef-4f0782db652f", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/morikuni/aec@v1.0.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/morikuni/aec", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.0" }, { "SPDXID": "SPDXRef-f137e45d-99f7-46c0-a549-fe0d5ca06a06", "description": "Package presignedurl provides the customizations for API clients to fill in\npresigned URLs into input parameters", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.10.10", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.10.10" }, { "SPDXID": "SPDXRef-283df8f5-43fa-4090-85f2-7a5fb8b85771", "description": "This is a library containing utilities to generate (reference) documentation\nfor the docker CLI on docs", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/cli-docs-tool@v0.8.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/docker/cli-docs-tool", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.8.0" }, { "SPDXID": "SPDXRef-eda98267-ac01-4f4e-9c70-c816da8ee68c", "description": "This repository provides Go terminal and console support packages", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/term@v0.27.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/term", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.27.0" }, { "SPDXID": "SPDXRef-4f57b75d-f84c-449a-b5e7-5996587073e1", "description": "go-version is a library for parsing versions and version constraints,\nand verifying versions against a set of constraints", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/hashicorp/go-version@v1.7.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mpl-2.0", "name": "github.com/hashicorp/go-version", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.7.0" }, { "SPDXID": "SPDXRef-50fb583e-12e0-4f57-9fab-45b34fffde8d", "description": "Functions for accessing \"clean\" Go http", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mpl-2.0", "name": "github.com/hashicorp/go-cleanhttp", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.5.2" }, { "SPDXID": "SPDXRef-581ed3fb-481e-4591-bdbd-c8c6b0b2dfb6", "description": "This section is empty", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.2.10", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/internal/configsources", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.2.10" }, { "SPDXID": "SPDXRef-47f24ced-6149-4d25-8ccd-b11362cf1081", "description": "Gorilla WebSocket is a Go implementation of the\nWebSocket protocol", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/gorilla/websocket@v1.5.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-simplified", "name": "github.com/gorilla/websocket", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.5.0" }, { "SPDXID": "SPDXRef-d0de6066-ab52-4873-8b60-1b3cd2234c95", "description": "buildx is a Docker CLI plugin for extended build capabilities with\nBuildKit", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/buildx@v0.19.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/docker/buildx", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.19.2" }, { "SPDXID": "SPDXRef-e207596b-9516-4fb9-88db-d903fbb8e970", "description": "The yaml package enables Go programs to comfortably encode and decode YAML\nvalues", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "gopkg.in/yaml.v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.4.0" }, { "SPDXID": "SPDXRef-0d5f9a21-0160-4290-9d38-03cd64d61bfc", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20240903143218-8af14fe29dc1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "google.golang.org/genproto/googleapis/rpc", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20240903143218-8af14fe29dc1" }, { "SPDXID": "SPDXRef-d6e41da7-8365-4e11-9dd3-7157ba0629c8", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.3.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/proto/otlp", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.3.1" }, { "SPDXID": "SPDXRef-aca5e04c-bb03-4acb-b626-690d6c068d8f", "description": "Smithy code generators for Go and the accompanying smithy-go runtime", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/smithy-go@v1.19.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/smithy-go", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.19.0" }, { "SPDXID": "SPDXRef-a50208ba-ae0e-402e-9911-c7ab9c129b51", "description": "A Go package for managing the registration, marshaling, and unmarshaling of encoded types", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/typeurl/v2@v2.2.3", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/typeurl/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.2.3" }, { "SPDXID": "SPDXRef-e5791eaf-4548-4cbf-943b-a6c348b92122", "description": "xxhash is a Go implementation of the 64-bit xxHash algorithm, XXH64", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/cespare/xxhash/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.3.0" }, { "SPDXID": "SPDXRef-663afda0-d117-4818-b1e4-0ebdbfbd070a", "description": "Package acceptencoding provides customizations associated with Accept Encoding Header", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.10.4", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.10.4" }, { "SPDXID": "SPDXRef-3f3ec6be-d756-4f01-abd1-7a29274f5936", "description": "GRPC for low-memory environments", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/ttrpc@v1.2.5", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/ttrpc", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.2.5" }, { "SPDXID": "SPDXRef-f699f7ea-5927-4899-9311-35d371ea602c", "description": "The Go implementation of gRPC: A high performance, open source, general\nRPC framework that puts mobile and HTTP/2 first", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.68.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "google.golang.org/grpc", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.68.1" }, { "SPDXID": "SPDXRef-b31de4af-9440-4826-a7ed-7b86406432b4", "description": "OpenTelemetry-Go is the Go implementation of OpenTelemetry", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" }, { "SPDXID": "SPDXRef-bfc9fa15-072c-445f-ab83-e37b151e96f3", "description": "mapstructure is a Go library for decoding generic map values to structures\nand vice versa, while providing helpful error handling", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/mitchellh/mapstructure", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.5.0" }, { "SPDXID": "SPDXRef-e71ea0f3-b351-4cec-9363-94789d464704", "description": "This package implements the logr interface\nin terms of Go's standard log package(https://pkg", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/go-logr/stdr", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.2.2" }, { "SPDXID": "SPDXRef-b078c79f-1905-497d-82e1-744d3fd00e46", "description": "An implementation of JSON Schema, based on IETF's draft v4 - Go language\nReferences :\nDependencies :\nThere are various ways to load your JSON data", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/xeipuuv/gojsonschema", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.2.0" }, { "SPDXID": "SPDXRef-72aee06c-666e-4214-9213-d0c1ae3b3d1b", "description": "This is a fork of (apparently no longer maintained)\nhttps://github", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/sys/capability@v0.4.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-simplified", "name": "github.com/moby/sys/capability", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.4.0" }, { "SPDXID": "SPDXRef-b3c2e585-e591-4d2e-8714-0a826ba33036", "description": "Shellquote provides utilities for joining/splitting strings using sh'sword-splitting rules", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/kballard/go-shellquote@v0.0.0-20180428030007-95032a82bc51", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/kballard/go-shellquote", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20180428030007-95032a82bc51" }, { "SPDXID": "SPDXRef-9db565d6-4ff9-44e1-9153-df0799232e2d", "description": "Docs: https://godoc", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/josharian/intern@v1.0.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/josharian/intern", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.0" }, { "SPDXID": "SPDXRef-04d686cb-2df9-4054-b111-76e3c2e4dda5", "description": "Package otlptracehttp provides an OTLP span exporter using HTTP with protobuf payloads", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" }, { "SPDXID": "SPDXRef-4cd548ba-5025-4f76-8531-e0d3123919ba", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/mxk/go-flowrate@v0.0.0-20140419014527-cca7078d478f", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/mxk/go-flowrate", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20140419014527-cca7078d478f" }, { "SPDXID": "SPDXRef-a1d2b282-a2cc-4f74-8fc2-0dd8a8862036", "description": "The Notary project has officially been accepted in to the Cloud Native Computing Foundation (CNCF)", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/theupdateframework/notary@v0.7.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/theupdateframework/notary", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.7.0" }, { "SPDXID": "SPDXRef-4ce31ba6-5f4f-4d4a-a0e2-e58e117e22fb", "description": "gomock is a mocking framework for the Go programming language", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.uber.org/mock@v0.5.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.uber.org/mock", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.5.0" }, { "SPDXID": "SPDXRef-e7bec7c8-e891-4f2d-950f-814b983d3fde", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/go-connections@v0.5.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/docker/go-connections", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.5.0" }, { "SPDXID": "SPDXRef-4ba71cde-dc14-4920-9a2f-33074e6e0fc1", "description": "A Commander for modern go CLI interactions\n\nCobra provides a simple interface to create powerful modern CLI\ninterfaces similar to git & go tools", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.8.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/spf13/cobra", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.8.1" }, { "SPDXID": "SPDXRef-69b58db6-05dc-42a3-90b9-50974181bf08", "description": "Package gorilla/mux implements a request router and dispatcher", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/gorilla/mux@v1.8.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/gorilla/mux", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.8.1" }, { "SPDXID": "SPDXRef-fbca20a5-16c2-42c1-88e5-cd4ed996f245", "description": "Fork of https://github", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/tilt-dev/fsnotify@v1.4.8-0.20220602155310-fff9c274a375", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/tilt-dev/fsnotify", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.4.8-0.20220602155310-fff9c274a375" }, { "SPDXID": "SPDXRef-4f597ef5-6725-47c7-b100-e4947fa6f8a2", "description": "A helper to merge structs and maps in Golang", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/imdario/mergo@v0.3.16", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/imdario/mergo", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.3.16" }, { "SPDXID": "SPDXRef-46870af7-dcc6-4beb-aaf4-051d8392f9f9", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:rpm/opencloudos/docker-compose-plugin@2.32.1-1?distro_version=9", "referenceType": "purl" } ], "filesAnalyzed": true, "name": "opencloudos/docker-compose-plugin", "primaryPackagePurpose": "LIBRARY", "versionInfo": "2.32.1-1" }, { "SPDXID": "SPDXRef-f03ffb19-cdea-4b44-aaa7-dc25f4f6efa4", "description": "gofuzz is a library for populating go objects with random values", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/google/gofuzz@v1.2.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/google/gofuzz", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.2.0" }, { "SPDXID": "SPDXRef-072fab20-b31e-48f7-b522-d63e866537cb", "description": "Go clients for talking to a kubernetes cluster", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/k8s.io/client-go@v0.29.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "k8s.io/client-go", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.29.2" }, { "SPDXID": "SPDXRef-41b22e30-c6a6-4b7e-9830-3c7cf62d974c", "description": "klog is a permanent fork of https://github", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/k8s.io/klog/v2@v2.110.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "k8s.io/klog/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.110.1" }, { "SPDXID": "SPDXRef-8bf0a5df-d0a5-4bec-a4a9-5d8c345aff60", "description": "This section is empty", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/patternmatcher@v0.6.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/patternmatcher", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.6.0" }, { "SPDXID": "SPDXRef-256e3e00-da6d-4076-9531-6b371ada04fe", "description": "This package is currently in development and the API may not be stable", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/google/uuid", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.6.0" }, { "SPDXID": "SPDXRef-40fca908-0e64-452d-8007-a5c05a47a08c", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/mattn/go-runewidth", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.15" }, { "SPDXID": "SPDXRef-69c35e5e-7206-4fdc-b242-26dfef34ccbb", "description": "This directory contains documents about Docker Image Specification v1", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/docker-image-spec", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.3.1" }, { "SPDXID": "SPDXRef-ed8d87e7-06cd-444f-8748-35ad61a79857", "description": "Go library to handle references to container images", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/distribution/reference@v0.6.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/distribution/reference", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.6.0" }, { "SPDXID": "SPDXRef-71f982fc-e8e3-430c-a126-e97f04b11614", "description": "Schema of the external API types that are served by the Kubernetes API server", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/k8s.io/api@v0.29.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "k8s.io/api", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.29.2" }, { "SPDXID": "SPDXRef-037660ca-7f0b-4551-a034-f0f740e64ad1", "description": "The yaml package enables Go programs to comfortably encode and decode YAML\nvalues", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0 AND mit", "name": "gopkg.in/yaml.v3", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v3.0.1" }, { "SPDXID": "SPDXRef-0d3a6efb-df01-46c4-8672-9a4259b468b0", "description": "StopSignal will not be recovered, will propagate to upper level goroutine\n\nGlobalUnboundedExecutor has the life cycle of the program itself\nany goroutine want to be shutdown before main exit can be started from this executor\nGlobalUnboundedExecutor expects the main function to call stop\nit does not magically knows the main function exits\n\nLogInfo logs informational message, for example\nwhich goroutine is still alive preventing the executor shutdown\n\nLogPanic logs goroutine panic\n\nThis section is empty", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/modern-go/concurrent", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20180306012644-bacd9c7ef1dd" }, { "SPDXID": "SPDXRef-43cdfeda-f3d2-4522-b8c7-cb98313157a7", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/go@v1.5.1-1.0.20160303222718-d30aec9fd63c", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/docker/go", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.5.1-1.0.20160303222718-d30aec9fd63c" }, { "SPDXID": "SPDXRef-80c94772-c5a8-42c7-a16a-233e0872d57c", "description": "locker provides a mechanism for creating finer-grained locking to helpfree up more global locks to handle other tasks", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/locker@v1.0.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/locker", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.1" }, { "SPDXID": "SPDXRef-00b7473b-978d-4c7c-866e-1543e84560e1", "description": "Package ansi is a small, fast library to create ANSI colored strings and codes", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20170206155736-9520e82c474b", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/mgutz/ansi", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20170206155736-9520e82c474b" }, { "SPDXID": "SPDXRef-52db1d7f-1c04-446b-876c-9c79b4620060", "description": "A simple fake clock for Go", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/jonboulle/clockwork@v0.4.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/jonboulle/clockwork", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.4.0" }, { "SPDXID": "SPDXRef-d393d4eb-c5c5-4566-990a-ad81f5a45d5c", "description": "This package is intended to be a more powerful and safer alternative to\nreflect", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/google/go-cmp@v0.6.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/google/go-cmp", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.6.0" }, { "SPDXID": "SPDXRef-c35b3317-2007-4443-bd4a-89d7246b5f67", "description": "kubernetes-sigs/yaml is a permanent fork of ghodss/yaml", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/sigs.k8s.io/yaml@v1.3.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new AND mit", "name": "sigs.k8s.io/yaml", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.3.0" }, { "SPDXID": "SPDXRef-89788ea7-f347-43d5-b8cf-aaa63a2675af", "description": "#VT100\n\nThis project was based on jaguilar/vt100\nThis is a vt100 screen reader", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/tonistiigi/vt100@v0.0.0-20240514184818-90bafcd6abab", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/tonistiigi/vt100", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20240514184818-90bafcd6abab" }, { "SPDXID": "SPDXRef-18b91d98-cbd2-4050-9383-9d199c7f4d04", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/pmezard/go-difflib@v1.0.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/pmezard/go-difflib", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.0" }, { "SPDXID": "SPDXRef-476291a6-6961-482f-b909-6d2af5e6df8f", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", "referenceType": "purl" } ], "filesAnalyzed": true, "name": "github.com/munnerz/goautoneg", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20191010083416-a7dc8b61c822" }, { "SPDXID": "SPDXRef-92b44b20-19d5-4fdf-8909-5257ca90b772", "description": "Contains a bunch of helper functions for go-openapi and go-swagger projects", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/go-openapi/swag@v0.22.3", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/go-openapi/swag", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.22.3" }, { "SPDXID": "SPDXRef-81aa030d-3358-492b-9dd7-d937f88442f9", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v0.3.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/errdefs", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.3.0" }, { "SPDXID": "SPDXRef-0edc1826-a5c5-45f9-9bc8-c9fdfa356089", "description": "An implementation of JSON Reference - Go languag", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/xeipuuv/gojsonreference", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20180127040603-bd5ef7bd5415" }, { "SPDXID": "SPDXRef-1dba4bd9-52d7-4fc1-b2fd-1837598e2999", "description": "NOTE: The API for injecting CDI devices that existed at container-device-interface/pkg has been removed", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/tags.cncf.io/container-device-interface@v0.8.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "tags.cncf.io/container-device-interface", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.8.0" }, { "SPDXID": "SPDXRef-6c57011f-430c-43c2-a94b-77e43a645bfd", "description": "This section is empty", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20240903143218-8af14fe29dc1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "google.golang.org/genproto/googleapis/api", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20240903143218-8af14fe29dc1" }, { "SPDXID": "SPDXRef-79be9656-391b-4368-99d7-d60f1d602f4e", "description": "This subrepository holds experimental and deprecated (in the old\ndirectory) packages", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/exp@v0.0.0-20240909161429-701f63a606c0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/exp", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20240909161429-701f63a606c0" }, { "SPDXID": "SPDXRef-7d55a08f-5953-47e8-bcc9-d5d672fb65d1", "description": "Package otlptrace contains abstractions for OTLP span exporters", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" }, { "SPDXID": "SPDXRef-255e98f6-6d92-4af7-a51c-b8d4331ea900", "description": "Package sequential provides a set of functions for managing sequential\nfiles on Windows", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/sys/sequential@v0.6.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/sys/sequential", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.6.0" }, { "SPDXID": "SPDXRef-39f1f65a-ae98-4663-8568-675f69da9847", "description": "gRPC to JSON proxy generator following the gRPC HTTP spec\n\nThe gRPC-Gateway is a plugin of the Google protocol buffers compiler\nprotoc", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.20.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/grpc-ecosystem/grpc-gateway/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.20.0" }, { "SPDXID": "SPDXRef-e28e9594-ab85-4187-bac9-42b3d3988922", "description": "logr offers an(other) opinion on how Go programs and libraries can do logging\nwithout becoming coupled to a particular logging implementation", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/go-logr/logr", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.4.2" }, { "SPDXID": "SPDXRef-8b42c2aa-2a15-4cec-9f5d-9c183ca79775", "description": "Sort orders and comparison functions", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/fvbommel/sortorder@v1.1.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/fvbommel/sortorder", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.1.0" }, { "SPDXID": "SPDXRef-26d4d244-854a-4c29-89db-a74bc44f2246", "description": "containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/containerd@v1.7.24", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/containerd", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.7.24" }, { "SPDXID": "SPDXRef-ed2d69ae-a799-4da5-ba75-3a0a85e5dd3f", "description": "Package metric provides an implementation of the OpenTelemetry metrics SDK", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/sdk/metric", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" }, { "SPDXID": "SPDXRef-38f877cf-8c13-48d0-82c7-e71bb4088ba9", "description": "Package errors provides simple error handling primitives", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-simplified", "name": "github.com/pkg/errors", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.9.1" }, { "SPDXID": "SPDXRef-33b6fc9a-7522-4486-831b-fca64c446074", "description": "SSE is a client/server implementation for Server Side Events for Golang", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/r3labs/sse@v0.0.0-20210224172625-26fe804710bc", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mpl-2.0", "name": "github.com/r3labs/sse", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20210224172625-26fe804710bc" }, { "SPDXID": "SPDXRef-cb836968-e79c-4b52-9353-a600b5bef481", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/log@v0.1.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/log", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.1.0" }, { "SPDXID": "SPDXRef-06d9d7c7-de4e-4e99-ac22-a1f051ed5199", "description": "Google's data interchange format", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/golang/protobuf@v1.5.4", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/golang/protobuf", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.5.4" }, { "SPDXID": "SPDXRef-99e1cbca-5d9e-4b18-b7b4-3b4202a8c255", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/buger/goterm@v1.0.4", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/buger/goterm", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.4" }, { "SPDXID": "SPDXRef-05807d41-0429-46af-8601-3ee527f07159", "description": "[]\n(https://travis-ci", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/davecgh/go-spew@v1.1.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "isc", "name": "github.com/davecgh/go-spew", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.1.1" }, { "SPDXID": "SPDXRef-48f76ccc-1b80-4841-aa7b-28321ca3dca5", "description": "Package inf (type inf", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/gopkg.in/inf.v0@v0.9.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "gopkg.in/inf.v0", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.9.1" }, { "SPDXID": "SPDXRef-ab336c9c-9d92-47de-9f4b-c07e85e17590", "description": "Package otlptracegrpc provides an OTLP span exporter using gRPC", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" }, { "SPDXID": "SPDXRef-61c9d134-83db-4ae4-9063-89e940b7ac83", "description": "Logrus is a structured logger for Go (golang), completely API compatible with\nthe standard library logger", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/sirupsen/logrus@v1.9.3", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/sirupsen/logrus", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.9.3" }, { "SPDXID": "SPDXRef-4eafcd72-34e9-4946-b2a7-1351769d8338", "description": "Parse line as shell words", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/mattn/go-shellwords@v1.0.12", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/mattn/go-shellwords", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.12" }, { "SPDXID": "SPDXRef-1bd15f62-b101-4a73-8df8-13edcf60f49a", "description": "gogoprotobuf is a fork of golang/protobuf with extra code generation features", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/gogo/protobuf@v1.3.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/gogo/protobuf", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.3.2" }, { "SPDXID": "SPDXRef-e1dbd961-d013-4f6d-8af9-9a659618713a", "description": "This project hosts the Go implementation for\nprotocol buffers, which is a\nlanguage-neutral, platform-neutral, extensible mechanism for serializing\nstructured data", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.35.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "google.golang.org/protobuf", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.35.1" }, { "SPDXID": "SPDXRef-d6d88a61-c037-439f-af30-9c5c65b35063", "description": "This repository provides Go concurrency primitives in addition to the\nones provided by the language and \"sync\" and \"sync/atomic\" packages", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/sync@v0.10.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/sync", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.10.0" }, { "SPDXID": "SPDXRef-dfddf546-a6f6-4dfa-b0b7-19cb3d878c68", "description": "go-csvvalue provides an efficient parser for a single-line CSV value", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/tonistiigi/go-csvvalue@v0.0.0-20240710180619-ddb21b71c0b4", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/tonistiigi/go-csvvalue", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20240710180619-ddb21b71c0b4" }, { "SPDXID": "SPDXRef-8ecb1840-22d6-4853-b2d8-d242bdabce13", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/spdystream@v0.2.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/spdystream", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.2.0" }, { "SPDXID": "SPDXRef-fee7a0d5-8e04-4c36-893f-4e55aa7e5c4e", "description": "An implementation of JSON Reference - Go language\nWork in progress ( 90% done )\nhttps://github", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/go-openapi/jsonreference", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.20.2" }, { "SPDXID": "SPDXRef-1eb1eb30-a933-4e64-bab5-aeecd5591ad1", "description": "Package credentials provides types for retrieving credentials from credentials sources", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.16.16", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/credentials", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.16.16" }, { "SPDXID": "SPDXRef-6a835a7e-407e-40f4-8519-326a5e37f652", "description": "go-pathspec implements gitignore-style pattern matching for paths", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/shibumi/go-pathspec", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.3.0" }, { "SPDXID": "SPDXRef-38cf9a7b-d1d6-4a12-b267-e30280dc8d94", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/serialx/hashring@v0.0.0-20200727003509-22c0c7ab6b1b", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/serialx/hashring", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20200727003509-22c0c7ab6b1b" }, { "SPDXID": "SPDXRef-1d3fb486-a8df-4719-939d-dfe34e9c0bdd", "description": "This package provides various compression algorithms", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/klauspost/compress@v1.17.11", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0 AND bsd-new AND mit", "name": "github.com/klauspost/compress", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.17.11" }, { "SPDXID": "SPDXRef-921b0ba7-c5ff-4f84-84f7-3fae9dababfe", "description": "A high-performance 100% compatible drop-in replacement of \"encoding/json\"\nYou can also use thrift like JSON using thrift-iterator\n\nSource code: https://github", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/json-iterator/go@v1.1.12", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/json-iterator/go", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.1.12" }, { "SPDXID": "SPDXRef-e7656784-8bd6-4e61-acee-5dab91cb06e0", "description": "Golang package for dealing with consoles", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/console@v1.0.4", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/console", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.4" }, { "SPDXID": "SPDXRef-25d9f52c-6a82-449b-8d35-4349a615f57f", "description": "Package sso provides the API client, operations, and parameter types for AWS\nSingle Sign-On", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.18.7", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/service/sso", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.18.7" }, { "SPDXID": "SPDXRef-8cd52da4-5255-455b-8616-d7374f20d846", "description": "The Docker toolset to pack, ship, store, and deliver content", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/distribution@v2.8.3%2Bincompatible", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/docker/distribution", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.8.3+incompatible" }, { "SPDXID": "SPDXRef-28b1c6d0-9a11-4af7-bb8d-13b2efadaf90", "description": "Package httpsnoop provides an easy way to capture http related metrics (i", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/felixge/httpsnoop", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.4" }, { "SPDXID": "SPDXRef-0f026350-1cd7-44d1-ac27-cc1efe6d7756", "description": "This library is a subproject of sig-api-machinery", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/sigs.k8s.io/json@v0.0.0-20221116044647-bc3834ca7abd", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0 AND bsd-new", "name": "sigs.k8s.io/json", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20221116044647-bc3834ca7abd" }, { "SPDXID": "SPDXRef-37c509a7-b4a7-461a-a64a-2994cd7ac608", "description": "This repository holds supplementary Go cryptography packages", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.31.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/crypto", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.31.0" }, { "SPDXID": "SPDXRef-c85fc286-0a4c-460e-b936-327697572a0f", "description": "Package otlpmetrichttp provides an OTLP metrics exporter using HTTP with protobuf payloads", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" }, { "SPDXID": "SPDXRef-3e6a9293-7a2a-4420-b904-ab15f1b3c072", "description": "term provides structures and helper functions to work with terminal (state, sizes)", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/term@v0.5.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/term", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.5.0" }, { "SPDXID": "SPDXRef-ed8abf2a-d2a8-490d-a3b9-399abf0a6cee", "description": "This repo contains code which implements the Kubernetes \"apply\" operation", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/sigs.k8s.io/structured-merge-diff/v4@v4.4.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "sigs.k8s.io/structured-merge-diff/v4", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v4.4.1" }, { "SPDXID": "SPDXRef-4c2337e8-541b-4cf3-a4f9-15fdb2f0f42f", "description": "reflect api that avoids runtime reflect", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/modern-go/reflect2@v1.0.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/modern-go/reflect2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.2" }, { "SPDXID": "SPDXRef-2e1d4b65-933f-4a0c-a5ba-e6cdd02c7459", "description": "errwrap is a package for Go that formalizes the pattern of wrapping errors\nand checking if an error contains another error", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mpl-2.0", "name": "github.com/hashicorp/errwrap", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.1.0" }, { "SPDXID": "SPDXRef-238ce14c-f80c-4638-8cce-8ed6ec0e4acb", "description": "Package metric provides the OpenTelemetry API used to measure metrics about\nsource code operation", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/metric", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" }, { "SPDXID": "SPDXRef-5732c758-b6b0-4697-b4c1-d7bef2a8b267", "description": "go-multierror is a package for Go that provides a mechanism for\nrepresenting a list of error values as a single error", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mpl-2.0", "name": "github.com/hashicorp/go-multierror", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.1.1" }, { "SPDXID": "SPDXRef-30777c01-056e-4b13-8ff9-d3ca4e03052d", "description": "mapstructure is a Go library for decoding generic map values to structures\nand vice versa, while providing helpful error handling", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.0.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/go-viper/mapstructure/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.0.0" }, { "SPDXID": "SPDXRef-cc20da85-9b28-4762-b65d-c344fd1dc915", "description": "This section is empty", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/sdk", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" }, { "SPDXID": "SPDXRef-356de854-4b61-4bf9-8d33-34af58bd8a3b", "description": "aws-sdk-go-v2 is the v2 AWS SDK for the Go programming language", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.24.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.24.1" }, { "SPDXID": "SPDXRef-4ecc7377-73c9-4f44-8392-002b3ddddd8b", "description": "This directory contains the GRPC API definitions for containerd", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/containerd/containerd/api@v1.7.19", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/containerd/containerd/api", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.7.19" }, { "SPDXID": "SPDXRef-234ed541-1b2c-42af-899a-83743bb3d3f7", "description": "Simple library to listen for keystrokes from the keyboard\nThe code is inspired by termbox-go library", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/eiannone/keyboard@v0.0.0-20220611211555-0d226195f203", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/eiannone/keyboard", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20220611211555-0d226195f203" }, { "SPDXID": "SPDXRef-539c2f6d-b27f-4dbd-b3db-84e56bfef7d1", "description": "This package implements types that can be used in stdlib formatting functionslike fmt", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/tonistiigi/units@v0.0.0-20180711220420-6950e57a87ea", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/tonistiigi/units", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20180711220420-6950e57a87ea" }, { "SPDXID": "SPDXRef-194817ed-db68-429f-8504-7a2e5d7397d2", "description": "BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/moby/buildkit@v0.18.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/moby/buildkit", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.18.1" }, { "SPDXID": "SPDXRef-b5da3cfa-67e2-458b-8882-2e56f8d10f13", "description": "go-units is a library to transform human friendly measurements into machine friendly values", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/go-units@v0.5.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/docker/go-units", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.5.0" }, { "SPDXID": "SPDXRef-0fa1ba11-2361-41a0-899d-9b1de4028785", "description": "pflag is a drop-in replacement for Go's flag package, implementing\nPOSIX/GNU-style --flags", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.5", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "github.com/spf13/pflag", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.5" }, { "SPDXID": "SPDXRef-cf6b5839-fc90-40a6-a8a4-2396302c2b52", "description": "The OCI Image Format project creates and maintains the software shipping container image format spec (OCI Image Format)", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/opencontainers/image-spec@v1.1.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/opencontainers/image-spec", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.1.0" }, { "SPDXID": "SPDXRef-4c16d29e-d5e1-4dd7-8619-990ef8bc9a3b", "description": "Package ssooidc provides the API client, operations, and parameter types for\nAWS SSO OIDC", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.21.7", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.21.7" }, { "SPDXID": "SPDXRef-c065b628-87bd-40d2-a538-e6fe5fd95e89", "description": "Perks contains the Go package quantile that computes approximate quantiles over\nan unbounded data stream within low memory and CPU bounds", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/beorn7/perks@v1.0.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/beorn7/perks", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.1" }, { "SPDXID": "SPDXRef-9db55e77-6201-40d3-b1f1-919f1568f009", "description": "This section is empty", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.5.10", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v2.5.10" }, { "SPDXID": "SPDXRef-321a8432-3ab8-4c38-9aca-2963efcf31cf", "description": "docker-credential-helpers is a suite of programs to use native stores to keep Docker credentials safe", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/docker-credential-helpers@v0.8.2", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/docker/docker-credential-helpers", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.8.2" }, { "SPDXID": "SPDXRef-dbfe9d6f-f909-4917-ba81-30a24fe3037e", "description": "Package imds provides the API client for interacting with the Amazon EC2\nInstance Metadata Service", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.14.11", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.14.11" }, { "SPDXID": "SPDXRef-17273c74-e047-4d74-9f38-b30ba0e7a06d", "description": "This repository holds supplemental Go packages for low-level interactions with\nthe operating system", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/sys", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.28.0" }, { "SPDXID": "SPDXRef-1a9dcd41-27e0-46dc-8b0f-8db80c75c306", "description": "Package easyjson provides a fast and easy way to marshal/unmarshal Go structs\nto/from JSON without the use of reflection", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/mailru/easyjson@v0.7.7", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "github.com/mailru/easyjson", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.7.7" }, { "SPDXID": "SPDXRef-a42b38f3-c6a8-433e-9fa3-c18e13971c8c", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/go-openapi/jsonpointer@v0.19.6", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/go-openapi/jsonpointer", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.19.6" }, { "SPDXID": "SPDXRef-eec0bc19-9d8c-40a4-81e1-fe89bbaff679", "description": "Moby is an open-source project created by Docker to enable and accelerate software containerization", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/docker/docker@v27.4.0%2Bincompatible", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/docker/docker", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v27.4.0+incompatible" }, { "SPDXID": "SPDXRef-a499f07b-2362-4a79-9ec1-458eb86645f1", "description": "Package otelhttp provides an http", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.53.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.53.0" }, { "SPDXID": "SPDXRef-141409a0-e4ac-4c3d-84f5-2a3718126a2e", "description": "Package config provides utilities for loading configuration from multiple\nsources that can be used to configure the SDK's API clients, and utilities", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.26.6", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/aws/aws-sdk-go-v2/config", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.26.6" }, { "SPDXID": "SPDXRef-b860f639-bd78-4108-a63b-24e5008d6226", "description": "A helper to merge structs and maps in Golang", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/dario.cat/mergo@v1.0.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "dario.cat/mergo", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.0.1" }, { "SPDXID": "SPDXRef-fb271664-7ccb-4992-941e-6aa8082f62ff", "description": "This repo is the home for Kubernetes OpenAPI discovery spec generation", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20231010175941-2dd684a91f00", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "k8s.io/kube-openapi", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20231010175941-2dd684a91f00" }, { "SPDXID": "SPDXRef-20746eba-0e4c-4e78-bc1c-b3bb9513ed10", "description": "Package otelgrpc is the instrumentation library for google", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.53.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.53.0" }, { "SPDXID": "SPDXRef-0a10ccf5-699e-438a-ac50-ec615a665c01", "description": "(If you are reading this because you are interested in Prometheus's native\nhistograms, pay special attention to the last paragraph below", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/prometheus/client_model@v0.6.1", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/prometheus/client_model", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.6.1" }, { "SPDXID": "SPDXRef-055da714-025d-48ab-ba4d-63fa128bd79d", "description": "This repository contains Go libraries that are shared across Prometheus\ncomponents and libraries", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/prometheus/common@v0.55.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/prometheus/common", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.55.0" }, { "SPDXID": "SPDXRef-25f360d6-2d29-48e8-85fe-a12a59b4a990", "description": "Package shlex implements a simple lexer which splits input in to tokens usingshell-style rules for quoting and commenting", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/google/shlex@v0.0.0-20191202100458-e7afc7fbc510", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "github.com/google/shlex", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20191202100458-e7afc7fbc510" }, { "SPDXID": "SPDXRef-95b9bf0c-381c-44c8-8f72-3ffa35253b9d", "description": "This is a Go port of the exponential backoff algorithm from Google's HTTP Client Library for Java", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/gopkg.in/cenkalti/backoff.v1@v1.1.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "mit", "name": "gopkg.in/cenkalti/backoff.v1", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.1.0" }, { "SPDXID": "SPDXRef-519c08c4-2cf8-4032-86fb-28751d3fabc7", "description": "This repository holds supplementary Go packages for text processing,\nmany involving Unicode", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/golang.org/x/text@v0.21.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "bsd-new", "name": "golang.org/x/text", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.21.0" }, { "SPDXID": "SPDXRef-b7a9512f-442b-4ae9-85fb-a6feb1bd4e76", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/github.com/tonistiigi/dchapes-mode@v0.0.0-20241001053921-ca0759fec205", "referenceType": "purl" } ], "filesAnalyzed": true, "name": "github.com/tonistiigi/dchapes-mode", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v0.0.0-20241001053921-ca0759fec205" }, { "SPDXID": "SPDXRef-1b6db587-130c-4f76-8fd8-b3b41d862e10", "description": "Package otlpmetricgrpc provides an OTLP metrics exporter using gRPC", "downloadLocation": "NONE", "externalRefs": [ { "referenceCategory": "PACKAGE_MANAGER", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc@v1.28.0", "referenceType": "purl" } ], "filesAnalyzed": true, "licenseDeclared": "apache-2.0", "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc", "primaryPackagePurpose": "LIBRARY", "versionInfo": "v1.28.0" } ], "relationships": [ { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-00b7473b-978d-4c7c-866e-1543e84560e1", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-141409a0-e4ac-4c3d-84f5-2a3718126a2e", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-38cf9a7b-d1d6-4a12-b267-e30280dc8d94", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-ab336c9c-9d92-47de-9f4b-c07e85e17590", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-0eba1c13-6d32-4292-b47c-3af8b744b362", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-92b44b20-19d5-4fdf-8909-5257ca90b772", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-46870af7-dcc6-4beb-aaf4-051d8392f9f9", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-38f877cf-8c13-48d0-82c7-e71bb4088ba9", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-72aee06c-666e-4214-9213-d0c1ae3b3d1b", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-256e3e00-da6d-4076-9531-6b371ada04fe", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-28b1c6d0-9a11-4af7-bb8d-13b2efadaf90", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-df5f3fae-ed68-4c4d-8066-8abd9d62ede5", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-3f3ec6be-d756-4f01-abd1-7a29274f5936", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-d34617c3-0705-4ec5-b71d-2685df0e214c", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-0f026350-1cd7-44d1-ac27-cc1efe6d7756", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-4f57b75d-f84c-449a-b5e7-5996587073e1", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-95b9bf0c-381c-44c8-8f72-3ffa35253b9d", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-81aa030d-3358-492b-9dd7-d937f88442f9", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-b3c2e585-e591-4d2e-8714-0a826ba33036", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-e5791eaf-4548-4cbf-943b-a6c348b92122", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-c0191da2-660c-4e0e-b129-061ccd5d47ce", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-0a10ccf5-699e-438a-ac50-ec615a665c01", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-4ecc7377-73c9-4f44-8392-002b3ddddd8b", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-6a835a7e-407e-40f4-8519-326a5e37f652", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-1a9dcd41-27e0-46dc-8b0f-8db80c75c306", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-fa537e70-0eff-4bd2-8391-55de6b17a653", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-519c08c4-2cf8-4032-86fb-28751d3fabc7", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-1605c708-f14e-4e11-8595-56f9b620ae57", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-f4529027-4152-4266-b034-32f40aa3c0a7", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-238ce14c-f80c-4638-8cce-8ed6ec0e4acb", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-09bfdba2-27cc-4f08-a459-fcfec5bf4846", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-b5da3cfa-67e2-458b-8882-2e56f8d10f13", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-dc98be51-c018-4122-ad19-3f438f626b2d", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-234ed541-1b2c-42af-899a-83743bb3d3f7", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-20746eba-0e4c-4e78-bc1c-b3bb9513ed10", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-1ff53f8a-ea34-4f47-ba90-11bdfb89aa0b", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-cf6b5839-fc90-40a6-a8a4-2396302c2b52", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-40fca908-0e64-452d-8007-a5c05a47a08c", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-883e55b9-2143-44ba-a22e-6f8be019078e", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-283df8f5-43fa-4090-85f2-7a5fb8b85771", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-17273c74-e047-4d74-9f38-b30ba0e7a06d", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-055da714-025d-48ab-ba4d-63fa128bd79d", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-194817ed-db68-429f-8504-7a2e5d7397d2", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-25f360d6-2d29-48e8-85fe-a12a59b4a990", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-c2cf1ca9-67cb-4121-b7b7-cd2f9a1a8d71", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-fb271664-7ccb-4992-941e-6aa8082f62ff", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-e7656784-8bd6-4e61-acee-5dab91cb06e0", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-eda98267-ac01-4f4e-9c70-c816da8ee68c", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-0d5f9a21-0160-4290-9d38-03cd64d61bfc", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-b078c79f-1905-497d-82e1-744d3fd00e46", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-f03ffb19-cdea-4b44-aaa7-dc25f4f6efa4", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-5732c758-b6b0-4697-b4c1-d7bef2a8b267", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-1dba4bd9-52d7-4fc1-b2fd-1837598e2999", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-f137e45d-99f7-46c0-a549-fe0d5ca06a06", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-89788ea7-f347-43d5-b8cf-aaa63a2675af", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-dfddf546-a6f6-4dfa-b0b7-19cb3d878c68", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-7704f796-abf1-44c1-a697-92fbb4f93ec1", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-1d3fb486-a8df-4719-939d-dfe34e9c0bdd", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-80c94772-c5a8-42c7-a16a-233e0872d57c", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-0edc1826-a5c5-45f9-9bc8-c9fdfa356089", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-54a1e25a-1d74-40eb-bbe2-a75ce13a5488", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-3e6a9293-7a2a-4420-b904-ab15f1b3c072", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-bfc9fa15-072c-445f-ab83-e37b151e96f3", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-3ffc0f4d-32b3-47db-8941-eee9a2b7475a", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-9c0b8229-0023-4b17-8ec9-ad01481c4dc5", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-0fa1ba11-2361-41a0-899d-9b1de4028785", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-37c509a7-b4a7-461a-a64a-2994cd7ac608", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-69b58db6-05dc-42a3-90b9-50974181bf08", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-30777c01-056e-4b13-8ff9-d3ca4e03052d", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-cc20da85-9b28-4762-b65d-c344fd1dc915", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-1bd15f62-b101-4a73-8df8-13edcf60f49a", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-4c16d29e-d5e1-4dd7-8619-990ef8bc9a3b", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-d393d4eb-c5c5-4566-990a-ad81f5a45d5c", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-f699f7ea-5927-4899-9311-35d371ea602c", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-a499f07b-2362-4a79-9ec1-458eb86645f1", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-d6d88a61-c037-439f-af30-9c5c65b35063", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-18b91d98-cbd2-4050-9383-9d199c7f4d04", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-037660ca-7f0b-4551-a034-f0f740e64ad1", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-d0286ee3-c95d-4da8-a05b-9d3fefaf8446", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-26d4d244-854a-4c29-89db-a74bc44f2246", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-028ff110-286e-490c-b4e5-0e67477b1ce3", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-476291a6-6961-482f-b909-6d2af5e6df8f", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-927b4ae6-1d9b-460d-8ac2-860676212997", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-ed2d69ae-a799-4da5-ba75-3a0a85e5dd3f", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-3afb5a31-4a0e-43d5-8a14-28e4f7479139", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-539c2f6d-b27f-4dbd-b3db-84e56bfef7d1", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-61c9d134-83db-4ae4-9063-89e940b7ac83", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-65f9c470-d865-4c4e-8e51-a6387061124f", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-a1d2b282-a2cc-4f74-8fc2-0dd8a8862036", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-c2ff6b10-5523-45e8-9612-041baaa6d912", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-debfbbdc-0920-4c03-b40e-d881945836c1", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-db37fdbc-62c4-43d8-b95a-d4ca5e0d3d60", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-13a04dc0-c870-40d1-bf10-c5dcbdf29da8", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-69c35e5e-7206-4fdc-b242-26dfef34ccbb", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-6c57011f-430c-43c2-a94b-77e43a645bfd", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-e207596b-9516-4fb9-88db-d903fbb8e970", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-a50208ba-ae0e-402e-9911-c7ab9c129b51", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-4c2337e8-541b-4cf3-a4f9-15fdb2f0f42f", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-8ecb1840-22d6-4853-b2d8-d242bdabce13", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-c35c623b-5e80-4700-a00e-00ca01ef7ab4", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-71f982fc-e8e3-430c-a126-e97f04b11614", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-99e1cbca-5d9e-4b18-b7b4-3b4202a8c255", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-1b6db587-130c-4f76-8fd8-b3b41d862e10", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-04d686cb-2df9-4054-b111-76e3c2e4dda5", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-48f76ccc-1b80-4841-aa7b-28321ca3dca5", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-9772aee2-e3b0-495b-a9fa-cea7004995dc", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-43cdfeda-f3d2-4522-b8c7-cb98313157a7", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-ed8abf2a-d2a8-490d-a3b9-399abf0a6cee", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-4eafcd72-34e9-4946-b2a7-1351769d8338", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-dbfe9d6f-f909-4917-ba81-30a24fe3037e", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-581ed3fb-481e-4591-bdbd-c8c6b0b2dfb6", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-8c27349a-9091-4940-8fdf-bdcf1b9d327a", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-06d9d7c7-de4e-4e99-ac22-a1f051ed5199", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-dceca663-b857-4fe4-8171-ee62ce0fd550", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-b4c7bca5-873f-4dd4-a340-4c5c5fa1c918", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-5c54d00a-4a9f-4143-b7ef-4f0782db652f", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-8cd6c42d-db90-41f6-9a9d-0c2c27b33828", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-072fab20-b31e-48f7-b522-d63e866537cb", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-9db55e77-6201-40d3-b1f1-919f1568f009", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-897823ec-a4af-4ae8-8ed0-1527a0018d70", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-eec0bc19-9d8c-40a4-81e1-fe89bbaff679", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-52db1d7f-1c04-446b-876c-9c79b4620060", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-f60c5c10-ef14-4502-ac43-d4787c9c5bfb", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-a42b38f3-c6a8-433e-9fa3-c18e13971c8c", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-c74f70a0-6763-4cb9-a6cb-7264abb58fce", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-1eb1eb30-a933-4e64-bab5-aeecd5591ad1", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-0d3a6efb-df01-46c4-8672-9a4259b468b0", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-39f1f65a-ae98-4663-8568-675f69da9847", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-255e98f6-6d92-4af7-a51c-b8d4331ea900", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-41c499c9-bb83-4b3e-9ee2-0889d0fffbf8", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-fee7a0d5-8e04-4c36-893f-4e55aa7e5c4e", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-e7bec7c8-e891-4f2d-950f-814b983d3fde", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-e71ea0f3-b351-4cec-9363-94789d464704", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-7d55a08f-5953-47e8-bcc9-d5d672fb65d1", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-cb836968-e79c-4b52-9353-a600b5bef481", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-e1dbd961-d013-4f6d-8af9-9a659618713a", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-c85fc286-0a4c-460e-b936-327697572a0f", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-fbca20a5-16c2-42c1-88e5-cd4ed996f245", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-ed8d87e7-06cd-444f-8748-35ad61a79857", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-356de854-4b61-4bf9-8d33-34af58bd8a3b", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-79be9656-391b-4368-99d7-d60f1d602f4e", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-d6e41da7-8365-4e11-9dd3-7157ba0629c8", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-4f0c2175-2ee0-4964-9e4f-1347740dabd5", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-8cd52da4-5255-455b-8616-d7374f20d846", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-c065b628-87bd-40d2-a538-e6fe5fd95e89", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-41b22e30-c6a6-4b7e-9830-3c7cf62d974c", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-23f809bd-b76d-4449-92e4-6fe07f4eb209", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-c35b3317-2007-4443-bd4a-89d7246b5f67", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-2e1d4b65-933f-4a0c-a5ba-e6cdd02c7459", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-b31de4af-9440-4826-a7ed-7b86406432b4", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-b860f639-bd78-4108-a63b-24e5008d6226", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-4ce31ba6-5f4f-4d4a-a0e2-e58e117e22fb", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-4f597ef5-6725-47c7-b100-e4947fa6f8a2", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-05807d41-0429-46af-8601-3ee527f07159", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-25d9f52c-6a82-449b-8d35-4349a615f57f", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-8bf0a5df-d0a5-4bec-a4a9-5d8c345aff60", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-3d599618-dac5-4d7c-8ccd-7d47ac7ea827", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-47f24ced-6149-4d25-8ccd-b11362cf1081", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-d0de6066-ab52-4873-8b60-1b3cd2234c95", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-921b0ba7-c5ff-4f84-84f7-3fae9dababfe", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-9db565d6-4ff9-44e1-9153-df0799232e2d", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-4ba71cde-dc14-4920-9a2f-33074e6e0fc1", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-4cd548ba-5025-4f76-8531-e0d3123919ba", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-5214ee12-2562-4099-b84a-773c198f619f", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-8b42c2aa-2a15-4cec-9f5d-9c183ca79775", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-e28e9594-ab85-4187-bac9-42b3d3988922", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-663afda0-d117-4818-b1e4-0ebdbfbd070a", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-5e9fc214-c1dd-4ed6-bdf1-6d03027d196a", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-9680651c-0b9a-42d2-8ce3-969b1bb80405", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-1b90cc6a-bc47-4f13-9a1f-b2f2dce43bb5", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-321a8432-3ab8-4c38-9aca-2963efcf31cf", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-50fb583e-12e0-4f57-9fab-45b34fffde8d", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-aca5e04c-bb03-4acb-b626-690d6c068d8f", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-33b6fc9a-7522-4486-831b-fca64c446074", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-b7a9512f-442b-4ae9-85fb-a6feb1bd4e76", "relationshipType": "DESCRIBES" } ] }