{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "version": 1,
  "metadata": {
    "component": {
      "bom-ref": "pkg:oci/devguard@main?arch=amd64&repository_url=ghcr.io%2Fl3montree-dev%2Fdevguard&tag=main-amd64",
      "type": "application",
      "name": "pkg:oci/devguard@main?arch=amd64&repository_url=ghcr.io%2Fl3montree-dev%2Fdevguard&tag=main-amd64",
      "purl": "pkg:oci/devguard@main?arch=amd64&repository_url=ghcr.io%2Fl3montree-dev%2Fdevguard&tag=main-amd64"
    }
  },
  "components": [
    {
      "bom-ref": "pkg:golang/dario.cat/mergo@v1.0.2",
      "type": "library",
      "name": "pkg:golang/dario.cat/mergo@v1.0.2",
      "version": "v1.0.2",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/dario.cat/mergo@v1.0.2"
    },
    {
      "bom-ref": "pkg:golang/filippo.io/edwards25519@v1.2.0",
      "type": "library",
      "name": "pkg:golang/filippo.io/edwards25519@v1.2.0",
      "version": "v1.2.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/filippo.io/edwards25519@v1.2.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/agnivade/levenshtein@v1.2.1",
      "type": "library",
      "name": "pkg:golang/github.com/agnivade/levenshtein@v1.2.1",
      "version": "v1.2.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/agnivade/levenshtein@v1.2.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/andybalholm/brotli@v1.2.1",
      "type": "library",
      "name": "pkg:golang/github.com/andybalholm/brotli@v1.2.1",
      "version": "v1.2.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/andybalholm/brotli@v1.2.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/bmatcuk/doublestar/v4@v4.10.0",
      "type": "library",
      "name": "pkg:golang/github.com/bmatcuk/doublestar/v4@v4.10.0",
      "version": "v4.10.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/bmatcuk/doublestar/v4@v4.10.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/bradleyfalzon/ghinstallation/v2@v2.18.0",
      "type": "library",
      "name": "pkg:golang/github.com/bradleyfalzon/ghinstallation/v2@v2.18.0",
      "version": "v2.18.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/bradleyfalzon/ghinstallation/v2@v2.18.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2",
      "type": "library",
      "name": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2",
      "version": "v4.5.2",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.7.0",
      "type": "library",
      "name": "pkg:golang/github.com/google/go-cmp@v0.7.0",
      "version": "v0.7.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/google/go-cmp@v0.7.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/google/go-github/v84@v84.0.0",
      "type": "library",
      "name": "pkg:golang/github.com/google/go-github/v84@v84.0.0",
      "version": "v84.0.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/google/go-github/v84@v84.0.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/google/go-querystring@v1.2.0",
      "type": "library",
      "name": "pkg:golang/github.com/google/go-querystring@v1.2.0",
      "version": "v1.2.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/google/go-querystring@v1.2.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/casbin/casbin/v2@v2.135.0",
      "type": "library",
      "name": "pkg:golang/github.com/casbin/casbin/v2@v2.135.0",
      "version": "v2.135.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/casbin/casbin/v2@v2.135.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/casbin/govaluate@v1.10.0",
      "type": "library",
      "name": "pkg:golang/github.com/casbin/govaluate@v1.10.0",
      "version": "v1.10.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/casbin/govaluate@v1.10.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/google/uuid@v1.6.0",
      "type": "library",
      "name": "pkg:golang/github.com/google/uuid@v1.6.0",
      "version": "v1.6.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/google/uuid@v1.6.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/casbin/casbin/v3@v3.10.0",
      "type": "library",
      "name": "pkg:golang/github.com/casbin/casbin/v3@v3.10.0",
      "version": "v3.10.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/casbin/casbin/v3@v3.10.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/casbin/gorm-adapter/v3@v3.41.0",
      "type": "library",
      "name": "pkg:golang/github.com/casbin/gorm-adapter/v3@v3.41.0",
      "version": "v3.41.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/casbin/gorm-adapter/v3@v3.41.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/glebarez/sqlite@v1.11.0",
      "type": "library",
      "name": "pkg:golang/github.com/glebarez/sqlite@v1.11.0",
      "version": "v1.11.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/glebarez/sqlite@v1.11.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/glebarez/go-sqlite@v1.22.0",
      "type": "library",
      "name": "pkg:golang/github.com/glebarez/go-sqlite@v1.22.0",
      "version": "v1.22.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/glebarez/go-sqlite@v1.22.0"
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/sys@v0.42.0",
      "type": "library",
      "name": "pkg:golang/golang.org/x/sys@v0.42.0",
      "version": "v0.42.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/golang.org/x/sys@v0.42.0"
    },
    {
      "bom-ref": "pkg:golang/modernc.org/libc@v1.70.0",
      "type": "library",
      "name": "pkg:golang/modernc.org/libc@v1.70.0",
      "version": "v1.70.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/modernc.org/libc@v1.70.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/dustin/go-humanize@v1.0.1",
      "type": "library",
      "name": "pkg:golang/github.com/dustin/go-humanize@v1.0.1",
      "version": "v1.0.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/dustin/go-humanize@v1.0.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.20",
      "type": "library",
      "name": "pkg:golang/github.com/mattn/go-isatty@v0.0.20",
      "version": "v0.0.20",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.20"
    },
    {
      "bom-ref": "pkg:golang/github.com/ncruces/go-strftime@v1.0.0",
      "type": "library",
      "name": "pkg:golang/github.com/ncruces/go-strftime@v1.0.0",
      "version": "v1.0.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/ncruces/go-strftime@v1.0.0"
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/tools@v0.43.0",
      "type": "library",
      "name": "pkg:golang/golang.org/x/tools@v0.43.0",
      "version": "v0.43.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/golang.org/x/tools@v0.43.0"
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/mod@v0.34.0",
      "type": "library",
      "name": "pkg:golang/golang.org/x/mod@v0.34.0",
      "version": "v0.34.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/golang.org/x/mod@v0.34.0"
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/net@v0.52.0",
      "type": "library",
      "name": "pkg:golang/golang.org/x/net@v0.52.0",
      "version": "v0.52.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/golang.org/x/net@v0.52.0"
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/crypto@v0.49.0",
      "type": "library",
      "name": "pkg:golang/golang.org/x/crypto@v0.49.0",
      "version": "v0.49.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/golang.org/x/crypto@v0.49.0"
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/term@v0.41.0",
      "type": "library",
      "name": "pkg:golang/golang.org/x/term@v0.41.0",
      "version": "v0.41.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/golang.org/x/term@v0.41.0"
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/text@v0.35.0",
      "type": "library",
      "name": "pkg:golang/golang.org/x/text@v0.35.0",
      "version": "v0.35.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/golang.org/x/text@v0.35.0"
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/sync@v0.20.0",
      "type": "library",
      "name": "pkg:golang/golang.org/x/sync@v0.20.0",
      "version": "v0.20.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/golang.org/x/sync@v0.20.0"
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/telemetry@v0.0.0-20260311193753-579e4da9a98c",
      "type": "library",
      "name": "pkg:golang/golang.org/x/telemetry@v0.0.0-20260311193753-579e4da9a98c",
      "version": "v0.0.0-20260311193753-579e4da9a98c",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/golang.org/x/telemetry@v0.0.0-20260311193753-579e4da9a98c"
    },
    {
      "bom-ref": "pkg:golang/modernc.org/fileutil@v1.4.0",
      "type": "library",
      "name": "pkg:golang/modernc.org/fileutil@v1.4.0",
      "version": "v1.4.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/modernc.org/fileutil@v1.4.0"
    },
    {
      "bom-ref": "pkg:golang/modernc.org/mathutil@v1.7.1",
      "type": "library",
      "name": "pkg:golang/modernc.org/mathutil@v1.7.1",
      "version": "v1.7.1",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/modernc.org/mathutil@v1.7.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec",
      "type": "library",
      "name": "pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec",
      "version": "v0.0.0-20230129092748-24d4a6f8daec",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec"
    },
    {
      "bom-ref": "pkg:golang/modernc.org/memory@v1.11.0",
      "type": "library",
      "name": "pkg:golang/modernc.org/memory@v1.11.0",
      "version": "v1.11.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/modernc.org/memory@v1.11.0"
    },
    {
      "bom-ref": "pkg:golang/modernc.org/sqlite@v1.48.1",
      "type": "library",
      "name": "pkg:golang/modernc.org/sqlite@v1.48.1",
      "version": "v1.48.1",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/modernc.org/sqlite@v1.48.1"
    },
    {
      "bom-ref": "pkg:golang/gorm.io/gorm@v1.31.1",
      "type": "library",
      "name": "pkg:golang/gorm.io/gorm@v1.31.1",
      "version": "v1.31.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/gorm.io/gorm@v1.31.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/jinzhu/inflection@v1.0.0",
      "type": "library",
      "name": "pkg:golang/github.com/jinzhu/inflection@v1.0.0",
      "version": "v1.0.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/jinzhu/inflection@v1.0.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/jinzhu/now@v1.1.5",
      "type": "library",
      "name": "pkg:golang/github.com/jinzhu/now@v1.1.5",
      "version": "v1.1.5",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/jinzhu/now@v1.1.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-sql-driver/mysql@v1.9.3",
      "type": "library",
      "name": "pkg:golang/github.com/go-sql-driver/mysql@v1.9.3",
      "version": "v1.9.3",
      "licenses": [
        {
          "license": {
            "id": "MPL-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-sql-driver/mysql@v1.9.3"
    },
    {
      "bom-ref": "pkg:golang/github.com/lib/pq@v1.12.3",
      "type": "library",
      "name": "pkg:golang/github.com/lib/pq@v1.12.3",
      "version": "v1.12.3",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/lib/pq@v1.12.3"
    },
    {
      "bom-ref": "pkg:golang/github.com/pkg/errors@v0.9.1",
      "type": "library",
      "name": "pkg:golang/github.com/pkg/errors@v0.9.1",
      "version": "v0.9.1",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/pkg/errors@v0.9.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/stretchr/testify@v1.11.1",
      "type": "library",
      "name": "pkg:golang/github.com/stretchr/testify@v1.11.1",
      "version": "v1.11.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/stretchr/testify@v1.11.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc",
      "type": "library",
      "name": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc",
      "version": "v1.1.2-0.20180830191138-d8f796af33cc",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc"
    },
    {
      "bom-ref": "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2",
      "type": "library",
      "name": "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2",
      "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2"
    },
    {
      "bom-ref": "pkg:golang/github.com/stretchr/objx@v0.5.3",
      "type": "library",
      "name": "pkg:golang/github.com/stretchr/objx@v0.5.3",
      "version": "v0.5.3",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/stretchr/objx@v0.5.3"
    },
    {
      "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
      "type": "library",
      "name": "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
      "version": "v3.0.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1"
    },
    {
      "bom-ref": "pkg:golang/gorm.io/driver/mysql@v1.6.0",
      "type": "library",
      "name": "pkg:golang/gorm.io/driver/mysql@v1.6.0",
      "version": "v1.6.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/gorm.io/driver/mysql@v1.6.0"
    },
    {
      "bom-ref": "pkg:golang/gorm.io/driver/postgres@v1.6.0",
      "type": "library",
      "name": "pkg:golang/gorm.io/driver/postgres@v1.6.0",
      "version": "v1.6.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/gorm.io/driver/postgres@v1.6.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/jackc/pgx/v5@v5.9.1",
      "type": "library",
      "name": "pkg:golang/github.com/jackc/pgx/v5@v5.9.1",
      "version": "v5.9.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/jackc/pgx/v5@v5.9.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/jackc/pgpassfile@v1.0.0",
      "type": "library",
      "name": "pkg:golang/github.com/jackc/pgpassfile@v1.0.0",
      "version": "v1.0.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/jackc/pgpassfile@v1.0.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/jackc/pgservicefile@v0.0.0-20240606120523-5a60cdf6a761",
      "type": "library",
      "name": "pkg:golang/github.com/jackc/pgservicefile@v0.0.0-20240606120523-5a60cdf6a761",
      "version": "v0.0.0-20240606120523-5a60cdf6a761",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/jackc/pgservicefile@v0.0.0-20240606120523-5a60cdf6a761"
    },
    {
      "bom-ref": "pkg:golang/github.com/jackc/puddle/v2@v2.2.2",
      "type": "library",
      "name": "pkg:golang/github.com/jackc/puddle/v2@v2.2.2",
      "version": "v2.2.2",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/jackc/puddle/v2@v2.2.2"
    },
    {
      "bom-ref": "pkg:golang/gorm.io/driver/sqlserver@v1.6.3",
      "type": "library",
      "name": "pkg:golang/gorm.io/driver/sqlserver@v1.6.3",
      "version": "v1.6.3",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/gorm.io/driver/sqlserver@v1.6.3"
    },
    {
      "bom-ref": "pkg:golang/github.com/microsoft/go-mssqldb@v1.9.8",
      "type": "library",
      "name": "pkg:golang/github.com/microsoft/go-mssqldb@v1.9.8",
      "version": "v1.9.8",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/microsoft/go-mssqldb@v1.9.8"
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.21.0",
      "type": "library",
      "name": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.21.0",
      "version": "v1.21.0",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.21.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.12.0",
      "type": "library",
      "name": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.12.0",
      "version": "v1.12.0",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.12.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/golang-sql/civil@v0.0.0-20220223132316-b832511892a9",
      "type": "library",
      "name": "pkg:golang/github.com/golang-sql/civil@v0.0.0-20220223132316-b832511892a9",
      "version": "v0.0.0-20220223132316-b832511892a9",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/golang-sql/civil@v0.0.0-20220223132316-b832511892a9"
    },
    {
      "bom-ref": "pkg:golang/github.com/golang-sql/sqlexp@v0.1.0",
      "type": "library",
      "name": "pkg:golang/github.com/golang-sql/sqlexp@v0.1.0",
      "version": "v0.1.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/golang-sql/sqlexp@v0.1.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/shopspring/decimal@v1.4.0",
      "type": "library",
      "name": "pkg:golang/github.com/shopspring/decimal@v1.4.0",
      "version": "v1.4.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/shopspring/decimal@v1.4.0"
    },
    {
      "bom-ref": "pkg:golang/gorm.io/plugin/dbresolver@v1.6.2",
      "type": "library",
      "name": "pkg:golang/gorm.io/plugin/dbresolver@v1.6.2",
      "version": "v1.6.2",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/gorm.io/plugin/dbresolver@v1.6.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3",
      "type": "library",
      "name": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3",
      "version": "v5.0.3",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3"
    },
    {
      "bom-ref": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0",
      "type": "library",
      "name": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0",
      "version": "v2.3.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/clickhouse/ch-go@v0.71.0",
      "type": "library",
      "name": "pkg:golang/github.com/clickhouse/ch-go@v0.71.0",
      "version": "v0.71.0",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/clickhouse/ch-go@v0.71.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0",
      "type": "library",
      "name": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0",
      "version": "v4.3.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-faster/city@v1.0.1",
      "type": "library",
      "name": "pkg:golang/github.com/go-faster/city@v1.0.1",
      "version": "v1.0.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-faster/city@v1.0.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-faster/errors@v0.7.1",
      "type": "library",
      "name": "pkg:golang/github.com/go-faster/errors@v0.7.1",
      "version": "v0.7.1",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-faster/errors@v0.7.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/go-version@v1.9.0",
      "type": "library",
      "name": "pkg:golang/github.com/hashicorp/go-version@v1.9.0",
      "version": "v1.9.0",
      "licenses": [
        {
          "license": {
            "id": "MPL-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/hashicorp/go-version@v1.9.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/klauspost/compress@v1.18.5",
      "type": "library",
      "name": "pkg:golang/github.com/klauspost/compress@v1.18.5",
      "version": "v1.18.5",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/klauspost/compress@v1.18.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/pierrec/lz4/v4@v4.1.26",
      "type": "library",
      "name": "pkg:golang/github.com/pierrec/lz4/v4@v4.1.26",
      "version": "v4.1.26",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/pierrec/lz4/v4@v4.1.26"
    },
    {
      "bom-ref": "pkg:golang/github.com/segmentio/asm@v1.2.1",
      "type": "library",
      "name": "pkg:golang/github.com/segmentio/asm@v1.2.1",
      "version": "v1.2.1",
      "licenses": [
        {
          "license": {
            "id": "MIT-0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/segmentio/asm@v1.2.1"
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel/metric@v1.43.0",
      "type": "library",
      "name": "pkg:golang/go.opentelemetry.io/otel/metric@v1.43.0",
      "version": "v1.43.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/go.opentelemetry.io/otel/metric@v1.43.0"
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
      "type": "library",
      "name": "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
      "version": "v1.43.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/go.opentelemetry.io/otel@v1.43.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-logr/logr@v1.4.3",
      "type": "library",
      "name": "pkg:golang/github.com/go-logr/logr@v1.4.3",
      "version": "v1.4.3",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-logr/logr@v1.4.3"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-logr/stdr@v1.2.2",
      "type": "library",
      "name": "pkg:golang/github.com/go-logr/stdr@v1.2.2",
      "version": "v1.2.2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-logr/stdr@v1.2.2"
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1",
      "type": "library",
      "name": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1",
      "version": "v1.2.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1"
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
      "type": "library",
      "name": "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
      "version": "v1.43.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0"
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0",
      "type": "library",
      "name": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0",
      "version": "v1.43.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0"
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.43.0",
      "type": "library",
      "name": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.43.0",
      "version": "v1.43.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.43.0"
    },
    {
      "bom-ref": "pkg:golang/go.uber.org/multierr@v1.11.0",
      "type": "library",
      "name": "pkg:golang/go.uber.org/multierr@v1.11.0",
      "version": "v1.11.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/go.uber.org/multierr@v1.11.0"
    },
    {
      "bom-ref": "pkg:golang/go.uber.org/zap@v1.27.1",
      "type": "library",
      "name": "pkg:golang/go.uber.org/zap@v1.27.1",
      "version": "v1.27.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/go.uber.org/zap@v1.27.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/clickhouse/clickhouse-go/v2@v2.44.0",
      "type": "library",
      "name": "pkg:golang/github.com/clickhouse/clickhouse-go/v2@v2.44.0",
      "version": "v2.44.0",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/clickhouse/clickhouse-go/v2@v2.44.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/docker/docker@v28.5.2+incompatible",
      "type": "library",
      "name": "pkg:golang/github.com/docker/docker@v28.5.2+incompatible",
      "version": "v28.5.2+incompatible",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/docker/docker@v28.5.2+incompatible"
    },
    {
      "bom-ref": "pkg:golang/github.com/docker/go-units@v0.5.0",
      "type": "library",
      "name": "pkg:golang/github.com/docker/go-units@v0.5.0",
      "version": "v0.5.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/docker/go-units@v0.5.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/paulmach/orb@v0.13.0",
      "type": "library",
      "name": "pkg:golang/github.com/paulmach/orb@v0.13.0",
      "version": "v0.13.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/paulmach/orb@v0.13.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/testcontainers/testcontainers-go@v0.41.0",
      "type": "library",
      "name": "pkg:golang/github.com/testcontainers/testcontainers-go@v0.41.0",
      "version": "v0.41.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/testcontainers/testcontainers-go@v0.41.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/errdefs@v1.0.0",
      "type": "library",
      "name": "pkg:golang/github.com/containerd/errdefs@v1.0.0",
      "version": "v1.0.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/containerd/errdefs@v1.0.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.4",
      "type": "library",
      "name": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.4",
      "version": "v1.0.0-rc.4",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.4"
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/log@v0.1.0",
      "type": "library",
      "name": "pkg:golang/github.com/containerd/log@v0.1.0",
      "version": "v0.1.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/containerd/log@v0.1.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/sirupsen/logrus@v1.9.4",
      "type": "library",
      "name": "pkg:golang/github.com/sirupsen/logrus@v1.9.4",
      "version": "v1.9.4",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/sirupsen/logrus@v1.9.4"
    },
    {
      "bom-ref": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
      "type": "library",
      "name": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
      "version": "v1.1.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
      "type": "library",
      "name": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
      "version": "v1.0.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/cpuguy83/dockercfg@v0.3.2",
      "type": "library",
      "name": "pkg:golang/github.com/cpuguy83/dockercfg@v0.3.2",
      "version": "v0.3.2",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/cpuguy83/dockercfg@v0.3.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/docker/go-connections@v0.6.0",
      "type": "library",
      "name": "pkg:golang/github.com/docker/go-connections@v0.6.0",
      "version": "v0.6.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/docker/go-connections@v0.6.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/microsoft/go-winio@v0.6.2",
      "type": "library",
      "name": "pkg:golang/github.com/microsoft/go-winio@v0.6.2",
      "version": "v0.6.2",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/microsoft/go-winio@v0.6.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/magiconair/properties@v1.8.10",
      "type": "library",
      "name": "pkg:golang/github.com/magiconair/properties@v1.8.10",
      "version": "v1.8.10",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/magiconair/properties@v1.8.10"
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/go-archive@v0.2.0",
      "type": "library",
      "name": "pkg:golang/github.com/moby/go-archive@v0.2.0",
      "version": "v0.2.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/moby/go-archive@v0.2.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/patternmatcher@v0.6.1",
      "type": "library",
      "name": "pkg:golang/github.com/moby/patternmatcher@v0.6.1",
      "version": "v0.6.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/moby/patternmatcher@v0.6.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/sys/sequential@v0.6.0",
      "type": "library",
      "name": "pkg:golang/github.com/moby/sys/sequential@v0.6.0",
      "version": "v0.6.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/moby/sys/sequential@v0.6.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/sys/user@v0.4.0",
      "type": "library",
      "name": "pkg:golang/github.com/moby/sys/user@v0.4.0",
      "version": "v0.4.0",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/moby/sys/user@v0.4.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/sys/userns@v0.1.0",
      "type": "library",
      "name": "pkg:golang/github.com/moby/sys/userns@v0.1.0",
      "version": "v0.1.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/moby/sys/userns@v0.1.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/term@v0.5.2",
      "type": "library",
      "name": "pkg:golang/github.com/moby/term@v0.5.2",
      "version": "v0.5.2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/moby/term@v0.5.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/go-ansiterm@v0.0.0-20250102033503-faa5f7b0171c",
      "type": "library",
      "name": "pkg:golang/github.com/azure/go-ansiterm@v0.0.0-20250102033503-faa5f7b0171c",
      "version": "v0.0.0-20250102033503-faa5f7b0171c",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/azure/go-ansiterm@v0.0.0-20250102033503-faa5f7b0171c"
    },
    {
      "bom-ref": "pkg:golang/github.com/shirou/gopsutil/v4@v4.26.3",
      "type": "library",
      "name": "pkg:golang/github.com/shirou/gopsutil/v4@v4.26.3",
      "version": "v4.26.3",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/shirou/gopsutil/v4@v4.26.3"
    },
    {
      "bom-ref": "pkg:golang/github.com/ebitengine/purego@v0.10.0",
      "type": "library",
      "name": "pkg:golang/github.com/ebitengine/purego@v0.10.0",
      "version": "v0.10.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/ebitengine/purego@v0.10.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/lufia/plan9stats@v0.0.0-20260330125221-c963978e514e",
      "type": "library",
      "name": "pkg:golang/github.com/lufia/plan9stats@v0.0.0-20260330125221-c963978e514e",
      "version": "v0.0.0-20260330125221-c963978e514e",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/lufia/plan9stats@v0.0.0-20260330125221-c963978e514e"
    },
    {
      "bom-ref": "pkg:golang/github.com/power-devops/perfstat@v0.0.0-20240221224432-82ca36839d55",
      "type": "library",
      "name": "pkg:golang/github.com/power-devops/perfstat@v0.0.0-20240221224432-82ca36839d55",
      "version": "v0.0.0-20240221224432-82ca36839d55",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/power-devops/perfstat@v0.0.0-20240221224432-82ca36839d55"
    },
    {
      "bom-ref": "pkg:golang/github.com/tklauser/go-sysconf@v0.3.16",
      "type": "library",
      "name": "pkg:golang/github.com/tklauser/go-sysconf@v0.3.16",
      "version": "v0.3.16",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/tklauser/go-sysconf@v0.3.16"
    },
    {
      "bom-ref": "pkg:golang/github.com/tklauser/numcpus@v0.11.0",
      "type": "library",
      "name": "pkg:golang/github.com/tklauser/numcpus@v0.11.0",
      "version": "v0.11.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/tklauser/numcpus@v0.11.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/yusufpapurcu/wmi@v1.2.4",
      "type": "library",
      "name": "pkg:golang/github.com/yusufpapurcu/wmi@v1.2.4",
      "version": "v1.2.4",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/yusufpapurcu/wmi@v1.2.4"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-ole/go-ole@v1.3.0",
      "type": "library",
      "name": "pkg:golang/github.com/go-ole/go-ole@v1.3.0",
      "version": "v1.3.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-ole/go-ole@v1.3.0"
    },
    {
      "bom-ref": "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
      "type": "library",
      "name": "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
      "version": "v3.0.4",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/go.yaml.in/yaml/v3@v3.0.4"
    },
    {
      "bom-ref": "pkg:golang/github.com/cloudflare/circl@v1.6.3",
      "type": "library",
      "name": "pkg:golang/github.com/cloudflare/circl@v1.6.3",
      "version": "v1.6.3",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/cloudflare/circl@v1.6.3"
    },
    {
      "bom-ref": "pkg:golang/github.com/cyclonedx/cyclonedx-go@v0.10.0",
      "type": "library",
      "name": "pkg:golang/github.com/cyclonedx/cyclonedx-go@v0.10.0",
      "version": "v0.10.0",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/cyclonedx/cyclonedx-go@v0.10.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.6.1",
      "type": "library",
      "name": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.6.1",
      "version": "v0.6.1",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.6.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/dunglas/httpsfv@v1.1.0",
      "type": "library",
      "name": "pkg:golang/github.com/dunglas/httpsfv@v1.1.0",
      "version": "v1.1.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/dunglas/httpsfv@v1.1.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/emirpasic/gods@v1.18.1",
      "type": "library",
      "name": "pkg:golang/github.com/emirpasic/gods@v1.18.1",
      "version": "v1.18.1",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/emirpasic/gods@v1.18.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/exaring/otelpgx@v0.10.0",
      "type": "library",
      "name": "pkg:golang/github.com/exaring/otelpgx@v0.10.0",
      "version": "v0.10.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/exaring/otelpgx@v0.10.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4",
      "type": "library",
      "name": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4",
      "version": "v1.0.4",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4"
    },
    {
      "bom-ref": "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.13",
      "type": "library",
      "name": "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.13",
      "version": "v1.4.13",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.13"
    },
    {
      "bom-ref": "pkg:golang/github.com/getsentry/sentry-go@v0.44.1",
      "type": "library",
      "name": "pkg:golang/github.com/getsentry/sentry-go@v0.44.1",
      "version": "v0.44.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/getsentry/sentry-go@v0.44.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376",
      "type": "library",
      "name": "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376",
      "version": "v1.5.1-0.20230307220236-3a3c6141e376",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376"
    },
    {
      "bom-ref": "pkg:golang/gopkg.in/warnings.v0@v0.1.2",
      "type": "library",
      "name": "pkg:golang/gopkg.in/warnings.v0@v0.1.2",
      "version": "v0.1.2",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:golang/gopkg.in/warnings.v0@v0.1.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-git/go-billy/v5@v5.8.0",
      "type": "library",
      "name": "pkg:golang/github.com/go-git/go-billy/v5@v5.8.0",
      "version": "v5.8.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-git/go-billy/v5@v5.8.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-git/go-git/v5@v5.17.2",
      "type": "library",
      "name": "pkg:golang/github.com/go-git/go-git/v5@v5.17.2",
      "version": "v5.17.2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-git/go-git/v5@v5.17.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8",
      "type": "library",
      "name": "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8",
      "version": "v0.0.0-20241129210726-2c02b8208cf8",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8"
    },
    {
      "bom-ref": "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99",
      "type": "library",
      "name": "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99",
      "version": "v0.0.0-20150711004518-d14ea06fba99",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99"
    },
    {
      "bom-ref": "pkg:golang/github.com/kevinburke/ssh_config@v1.6.0",
      "type": "library",
      "name": "pkg:golang/github.com/kevinburke/ssh_config@v1.6.0",
      "version": "v1.6.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/kevinburke/ssh_config@v1.6.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/pjbgf/sha1cd@v0.5.0",
      "type": "library",
      "name": "pkg:golang/github.com/pjbgf/sha1cd@v0.5.0",
      "version": "v0.5.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/pjbgf/sha1cd@v0.5.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/klauspost/cpuid/v2@v2.3.0",
      "type": "library",
      "name": "pkg:golang/github.com/klauspost/cpuid/v2@v2.3.0",
      "version": "v2.3.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/klauspost/cpuid/v2@v2.3.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/protonmail/go-crypto@v1.4.1",
      "type": "library",
      "name": "pkg:golang/github.com/protonmail/go-crypto@v1.4.1",
      "version": "v1.4.1",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/protonmail/go-crypto@v1.4.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/sergi/go-diff@v1.4.0",
      "type": "library",
      "name": "pkg:golang/github.com/sergi/go-diff@v1.4.0",
      "version": "v1.4.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/sergi/go-diff@v1.4.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/skeema/knownhosts@v1.3.2",
      "type": "library",
      "name": "pkg:golang/github.com/skeema/knownhosts@v1.3.2",
      "version": "v1.3.2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/skeema/knownhosts@v1.3.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3",
      "type": "library",
      "name": "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3",
      "version": "v0.3.3",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-playground/locales@v0.14.1",
      "type": "library",
      "name": "pkg:golang/github.com/go-playground/locales@v0.14.1",
      "version": "v0.14.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-playground/locales@v0.14.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-playground/universal-translator@v0.18.1",
      "type": "library",
      "name": "pkg:golang/github.com/go-playground/universal-translator@v0.18.1",
      "version": "v0.18.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-playground/universal-translator@v0.18.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-playground/validator/v10@v10.30.2",
      "type": "library",
      "name": "pkg:golang/github.com/go-playground/validator/v10@v10.30.2",
      "version": "v10.30.2",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-playground/validator/v10@v10.30.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/leodido/go-urn@v1.4.0",
      "type": "library",
      "name": "pkg:golang/github.com/leodido/go-urn@v1.4.0",
      "version": "v1.4.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/leodido/go-urn@v1.4.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0",
      "type": "library",
      "name": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0",
      "version": "v2.5.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/gobwas/glob@v0.2.3",
      "type": "library",
      "name": "pkg:golang/github.com/gobwas/glob@v0.2.3",
      "version": "v0.2.3",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/gobwas/glob@v0.2.3"
    },
    {
      "bom-ref": "pkg:golang/github.com/gocsaf/csaf/v3@v3.5.1",
      "type": "library",
      "name": "pkg:golang/github.com/gocsaf/csaf/v3@v3.5.1",
      "version": "v3.5.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/gocsaf/csaf/v3@v3.5.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/intevation/gval@v1.3.0",
      "type": "library",
      "name": "pkg:golang/github.com/intevation/gval@v1.3.0",
      "version": "v1.3.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/intevation/gval@v1.3.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/intevation/jsonpath@v0.2.1",
      "type": "library",
      "name": "pkg:golang/github.com/intevation/jsonpath@v0.2.1",
      "version": "v0.2.1",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/intevation/jsonpath@v0.2.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0",
      "type": "library",
      "name": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0",
      "version": "v1.1.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/protonmail/gopenpgp/v2@v2.10.0",
      "type": "library",
      "name": "pkg:golang/github.com/protonmail/gopenpgp/v2@v2.10.0",
      "version": "v2.10.0",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/protonmail/gopenpgp/v2@v2.10.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/protonmail/go-mime@v0.0.0-20230322103455-7d82a3887f2f",
      "type": "library",
      "name": "pkg:golang/github.com/protonmail/go-mime@v0.0.0-20230322103455-7d82a3887f2f",
      "version": "v0.0.0-20230322103455-7d82a3887f2f",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/protonmail/go-mime@v0.0.0-20230322103455-7d82a3887f2f"
    },
    {
      "bom-ref": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.2",
      "type": "library",
      "name": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.2",
      "version": "v6.0.2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.2"
    },
    {
      "bom-ref": "pkg:golang/go.etcd.io/bbolt@v1.4.3",
      "type": "library",
      "name": "pkg:golang/go.etcd.io/bbolt@v1.4.3",
      "version": "v1.4.3",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/go.etcd.io/bbolt@v1.4.3"
    },
    {
      "bom-ref": "pkg:golang/github.com/spf13/cobra@v1.10.2",
      "type": "library",
      "name": "pkg:golang/github.com/spf13/cobra@v1.10.2",
      "version": "v1.10.2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/spf13/cobra@v1.10.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.7",
      "type": "library",
      "name": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.7",
      "version": "v2.0.7",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.7"
    },
    {
      "bom-ref": "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0",
      "type": "library",
      "name": "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0",
      "version": "v2.1.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0",
      "type": "library",
      "name": "pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0",
      "version": "v1.1.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.10",
      "type": "library",
      "name": "pkg:golang/github.com/spf13/pflag@v1.0.10",
      "version": "v1.0.10",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/spf13/pflag@v1.0.10"
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/time@v0.15.0",
      "type": "library",
      "name": "pkg:golang/golang.org/x/time@v0.15.0",
      "version": "v0.15.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/golang.org/x/time@v0.15.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/golang-migrate/migrate/v4@v4.19.1",
      "type": "library",
      "name": "pkg:golang/github.com/golang-migrate/migrate/v4@v4.19.1",
      "version": "v4.19.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/golang-migrate/migrate/v4@v4.19.1"
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/spanner@v1.89.0",
      "type": "library",
      "name": "pkg:golang/cloud.google.com/go/spanner@v1.89.0",
      "version": "v1.89.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/cloud.google.com/go/spanner@v1.89.0"
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/iam@v1.7.0",
      "type": "library",
      "name": "pkg:golang/cloud.google.com/go/iam@v1.7.0",
      "version": "v1.7.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/cloud.google.com/go/iam@v1.7.0"
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/longrunning@v0.9.0",
      "type": "library",
      "name": "pkg:golang/cloud.google.com/go/longrunning@v0.9.0",
      "version": "v0.9.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/cloud.google.com/go/longrunning@v0.9.0"
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go@v0.123.0",
      "type": "library",
      "name": "pkg:golang/cloud.google.com/go@v0.123.0",
      "version": "v0.123.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/cloud.google.com/go@v0.123.0"
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/storage@v1.59.2",
      "type": "library",
      "name": "pkg:golang/cloud.google.com/go/storage@v1.59.2",
      "version": "v1.59.2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/cloud.google.com/go/storage@v1.59.2"
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/auth@v0.20.0",
      "type": "library",
      "name": "pkg:golang/cloud.google.com/go/auth@v0.20.0",
      "version": "v0.20.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/cloud.google.com/go/auth@v0.20.0"
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0",
      "type": "library",
      "name": "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0",
      "version": "v0.9.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/google/s2a-go@v0.1.9",
      "type": "library",
      "name": "pkg:golang/github.com/google/s2a-go@v0.1.9",
      "version": "v0.1.9",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/google/s2a-go@v0.1.9"
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/api@v0.275.0",
      "type": "library",
      "name": "pkg:golang/google.golang.org/api@v0.275.0",
      "version": "v0.275.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/google.golang.org/api@v0.275.0"
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8",
      "type": "library",
      "name": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8",
      "version": "v0.2.8",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8"
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.36.0",
      "type": "library",
      "name": "pkg:golang/golang.org/x/oauth2@v0.36.0",
      "version": "v0.36.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/golang.org/x/oauth2@v0.36.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.14",
      "type": "library",
      "name": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.14",
      "version": "v0.3.14",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.14"
    },
    {
      "bom-ref": "pkg:golang/github.com/googleapis/gax-go/v2@v2.21.0",
      "type": "library",
      "name": "pkg:golang/github.com/googleapis/gax-go/v2@v2.21.0",
      "version": "v2.21.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/googleapis/gax-go/v2@v2.21.0"
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260406210006-6f92a3bedf2d",
      "type": "library",
      "name": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260406210006-6f92a3bedf2d",
      "version": "v0.0.0-20260406210006-6f92a3bedf2d",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260406210006-6f92a3bedf2d"
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260406210006-6f92a3bedf2d",
      "type": "library",
      "name": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260406210006-6f92a3bedf2d",
      "version": "v0.0.0-20260406210006-6f92a3bedf2d",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260406210006-6f92a3bedf2d"
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.36.11",
      "type": "library",
      "name": "pkg:golang/google.golang.org/protobuf@v1.36.11",
      "version": "v1.36.11",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/google.golang.org/protobuf@v1.36.11"
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/grpc@v1.80.0",
      "type": "library",
      "name": "pkg:golang/google.golang.org/grpc@v1.80.0",
      "version": "v1.80.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/google.golang.org/grpc@v1.80.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20251210132809-ee656c7534f5",
      "type": "library",
      "name": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20251210132809-ee656c7534f5",
      "version": "v0.0.0-20251210132809-ee656c7534f5",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20251210132809-ee656c7534f5"
    },
    {
      "bom-ref": "pkg:golang/cel.dev/expr@v0.25.1",
      "type": "library",
      "name": "pkg:golang/cel.dev/expr@v0.25.1",
      "version": "v0.25.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/cel.dev/expr@v0.25.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.0",
      "type": "library",
      "name": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.0",
      "version": "v1.3.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.36.0",
      "type": "library",
      "name": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.36.0",
      "version": "v1.36.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.36.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10",
      "type": "library",
      "name": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10",
      "version": "v0.6.1-0.20240319094008-0393e58bdf10",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10"
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.10.0",
      "type": "library",
      "name": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.10.0",
      "version": "v1.10.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.10.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.28.0",
      "type": "library",
      "name": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.28.0",
      "version": "v2.28.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.28.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.6.0",
      "type": "library",
      "name": "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.6.0",
      "version": "v2.6.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.6.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4",
      "type": "library",
      "name": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4",
      "version": "v4.1.4",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4"
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.40.0",
      "type": "library",
      "name": "pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.40.0",
      "version": "v1.40.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.40.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcp@v1.31.0",
      "type": "library",
      "name": "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcp@v1.31.0",
      "version": "v1.31.0",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcp@v1.31.0"
    },
    {
      "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20260406210006-6f92a3bedf2d",
      "type": "library",
      "name": "pkg:golang/google.golang.org/genproto@v0.0.0-20260406210006-6f92a3bedf2d",
      "version": "v0.0.0-20260406210006-6f92a3bedf2d",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20260406210006-6f92a3bedf2d"
    },
    {
      "bom-ref": "pkg:golang/cloud.google.com/go/monitoring@v1.25.0",
      "type": "library",
      "name": "pkg:golang/cloud.google.com/go/monitoring@v1.25.0",
      "version": "v1.25.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/cloud.google.com/go/monitoring@v1.25.0"
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.68.0",
      "type": "library",
      "name": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.68.0",
      "version": "v0.68.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.68.0"
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.68.0",
      "type": "library",
      "name": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.68.0",
      "version": "v0.68.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.68.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/exporter/metric@v0.55.0",
      "type": "library",
      "name": "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/exporter/metric@v0.55.0",
      "version": "v0.55.0",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/exporter/metric@v0.55.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/internal/resourcemapping@v0.55.0",
      "type": "library",
      "name": "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/internal/resourcemapping@v0.55.0",
      "version": "v0.55.0",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/internal/resourcemapping@v0.55.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/googlecloudplatform/grpc-gcp-go/grpcgcp@v1.6.0",
      "type": "library",
      "name": "pkg:golang/github.com/googlecloudplatform/grpc-gcp-go/grpcgcp@v1.6.0",
      "version": "v1.6.0",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/googlecloudplatform/grpc-gcp-go/grpcgcp@v1.6.0"
    },
    {
      "bom-ref": "pkg:golang/go.opencensus.io@v0.24.0",
      "type": "library",
      "name": "pkg:golang/go.opencensus.io@v0.24.0",
      "version": "v0.24.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/go.opencensus.io@v0.24.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go@v1.55.8",
      "type": "library",
      "name": "pkg:golang/github.com/aws/aws-sdk-go@v1.55.8",
      "version": "v1.55.8",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aws/aws-sdk-go@v1.55.8"
    },
    {
      "bom-ref": "pkg:golang/github.com/jmespath/go-jmespath@v0.4.1-0.20220621161143-b0104c826a24",
      "type": "library",
      "name": "pkg:golang/github.com/jmespath/go-jmespath@v0.4.1-0.20220621161143-b0104c826a24",
      "version": "v0.4.1-0.20220621161143-b0104c826a24",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/jmespath/go-jmespath@v0.4.1-0.20220621161143-b0104c826a24"
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/adal@v0.9.24",
      "type": "library",
      "name": "pkg:golang/github.com/azure/go-autorest/autorest/adal@v0.9.24",
      "version": "v0.9.24",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/azure/go-autorest/autorest/adal@v0.9.24"
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/date@v0.3.1",
      "type": "library",
      "name": "pkg:golang/github.com/azure/go-autorest/autorest/date@v0.3.1",
      "version": "v0.3.1",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/azure/go-autorest/autorest/date@v0.3.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/go-autorest@v14.2.0+incompatible",
      "type": "library",
      "name": "pkg:golang/github.com/azure/go-autorest@v14.2.0+incompatible",
      "version": "v14.2.0+incompatible",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/azure/go-autorest@v14.2.0+incompatible"
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/go-autorest/logger@v0.2.2",
      "type": "library",
      "name": "pkg:golang/github.com/azure/go-autorest/logger@v0.2.2",
      "version": "v0.2.2",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/azure/go-autorest/logger@v0.2.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/go-autorest/tracing@v0.6.1",
      "type": "library",
      "name": "pkg:golang/github.com/azure/go-autorest/tracing@v0.6.1",
      "version": "v0.6.1",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/azure/go-autorest/tracing@v0.6.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/clickhouse/clickhouse-go@v1.5.4",
      "type": "library",
      "name": "pkg:golang/github.com/clickhouse/clickhouse-go@v1.5.4",
      "version": "v1.5.4",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/clickhouse/clickhouse-go@v1.5.4"
    },
    {
      "bom-ref": "pkg:golang/github.com/cloudflare/golz4@v0.0.0-20150217214814-ef862a3cdc58",
      "type": "library",
      "name": "pkg:golang/github.com/cloudflare/golz4@v0.0.0-20150217214814-ef862a3cdc58",
      "version": "v0.0.0-20150217214814-ef862a3cdc58",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/cloudflare/golz4@v0.0.0-20150217214814-ef862a3cdc58"
    },
    {
      "bom-ref": "pkg:golang/github.com/cockroachdb/cockroach-go/v2@v2.1.1",
      "type": "library",
      "name": "pkg:golang/github.com/cockroachdb/cockroach-go/v2@v2.1.1",
      "version": "v2.1.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/cockroachdb/cockroach-go/v2@v2.1.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/jackc/pgx/v4@v4.18.2",
      "type": "library",
      "name": "pkg:golang/github.com/jackc/pgx/v4@v4.18.2",
      "version": "v4.18.2",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/jackc/pgx/v4@v4.18.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/jackc/pgconn@v1.14.3",
      "type": "library",
      "name": "pkg:golang/github.com/jackc/pgconn@v1.14.3",
      "version": "v1.14.3",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/jackc/pgconn@v1.14.3"
    },
    {
      "bom-ref": "pkg:golang/github.com/jackc/chunkreader/v2@v2.0.1",
      "type": "library",
      "name": "pkg:golang/github.com/jackc/chunkreader/v2@v2.0.1",
      "version": "v2.0.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/jackc/chunkreader/v2@v2.0.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/jackc/pgio@v1.0.0",
      "type": "library",
      "name": "pkg:golang/github.com/jackc/pgio@v1.0.0",
      "version": "v1.0.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/jackc/pgio@v1.0.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/jackc/pgproto3/v2@v2.3.3",
      "type": "library",
      "name": "pkg:golang/github.com/jackc/pgproto3/v2@v2.3.3",
      "version": "v2.3.3",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/jackc/pgproto3/v2@v2.3.3"
    },
    {
      "bom-ref": "pkg:golang/github.com/jackc/pgtype@v1.14.0",
      "type": "library",
      "name": "pkg:golang/github.com/jackc/pgtype@v1.14.0",
      "version": "v1.14.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/jackc/pgtype@v1.14.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/gocql/gocql@v0.0.0-20210515062232-b7ef815b4556",
      "type": "library",
      "name": "pkg:golang/github.com/gocql/gocql@v0.0.0-20210515062232-b7ef815b4556",
      "version": "v0.0.0-20210515062232-b7ef815b4556",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/gocql/gocql@v0.0.0-20210515062232-b7ef815b4556"
    },
    {
      "bom-ref": "pkg:golang/github.com/golang/snappy@v1.0.0",
      "type": "library",
      "name": "pkg:golang/github.com/golang/snappy@v1.0.0",
      "version": "v1.0.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/golang/snappy@v1.0.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/hailocab/go-hostpool@v0.0.0-20160125115350-e80d13ce29ed",
      "type": "library",
      "name": "pkg:golang/github.com/hailocab/go-hostpool@v0.0.0-20160125115350-e80d13ce29ed",
      "version": "v0.0.0-20160125115350-e80d13ce29ed",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/hailocab/go-hostpool@v0.0.0-20160125115350-e80d13ce29ed"
    },
    {
      "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1",
      "type": "library",
      "name": "pkg:golang/gopkg.in/inf.v0@v0.9.1",
      "version": "v0.9.1",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/google/go-github/v39@v39.2.0",
      "type": "library",
      "name": "pkg:golang/github.com/google/go-github/v39@v39.2.0",
      "version": "v39.2.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/google/go-github/v39@v39.2.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/jackc/pgerrcode@v0.0.0-20240316143900-6e2875d9b438",
      "type": "library",
      "name": "pkg:golang/github.com/jackc/pgerrcode@v0.0.0-20240316143900-6e2875d9b438",
      "version": "v0.0.0-20240316143900-6e2875d9b438",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/jackc/pgerrcode@v0.0.0-20240316143900-6e2875d9b438"
    },
    {
      "bom-ref": "pkg:golang/github.com/ktrysmt/go-bitbucket@v0.6.4",
      "type": "library",
      "name": "pkg:golang/github.com/ktrysmt/go-bitbucket@v0.6.4",
      "version": "v0.6.4",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/ktrysmt/go-bitbucket@v0.6.4"
    },
    {
      "bom-ref": "pkg:golang/github.com/k0kubun/pp@v2.3.0+incompatible",
      "type": "library",
      "name": "pkg:golang/github.com/k0kubun/pp@v2.3.0+incompatible",
      "version": "v2.3.0+incompatible",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/k0kubun/pp@v2.3.0+incompatible"
    },
    {
      "bom-ref": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.1-0.20231216201459-8508981c8b6c",
      "type": "library",
      "name": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.1-0.20231216201459-8508981c8b6c",
      "version": "v1.5.1-0.20231216201459-8508981c8b6c",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.1-0.20231216201459-8508981c8b6c"
    },
    {
      "bom-ref": "pkg:golang/github.com/mattn/go-sqlite3@v1.14.28",
      "type": "library",
      "name": "pkg:golang/github.com/mattn/go-sqlite3@v1.14.28",
      "version": "v1.14.28",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/mattn/go-sqlite3@v1.14.28"
    },
    {
      "bom-ref": "pkg:golang/github.com/mutecomm/go-sqlcipher/v4@v4.4.0",
      "type": "library",
      "name": "pkg:golang/github.com/mutecomm/go-sqlcipher/v4@v4.4.0",
      "version": "v4.4.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/mutecomm/go-sqlcipher/v4@v4.4.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/nakagami/firebirdsql@v0.0.0-20190310045651-3c02a58cfed8",
      "type": "library",
      "name": "pkg:golang/github.com/nakagami/firebirdsql@v0.0.0-20190310045651-3c02a58cfed8",
      "version": "v0.0.0-20190310045651-3c02a58cfed8",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/nakagami/firebirdsql@v0.0.0-20190310045651-3c02a58cfed8"
    },
    {
      "bom-ref": "pkg:golang/github.com/neo4j/neo4j-go-driver@v1.8.1-0.20200803113522-b626aa943eba",
      "type": "library",
      "name": "pkg:golang/github.com/neo4j/neo4j-go-driver@v1.8.1-0.20200803113522-b626aa943eba",
      "version": "v1.8.1-0.20200803113522-b626aa943eba",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/neo4j/neo4j-go-driver@v1.8.1-0.20200803113522-b626aa943eba"
    },
    {
      "bom-ref": "pkg:golang/github.com/rqlite/gorqlite@v0.0.0-20230708021416-2acd02b70b79",
      "type": "library",
      "name": "pkg:golang/github.com/rqlite/gorqlite@v0.0.0-20230708021416-2acd02b70b79",
      "version": "v0.0.0-20230708021416-2acd02b70b79",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/rqlite/gorqlite@v0.0.0-20230708021416-2acd02b70b79"
    },
    {
      "bom-ref": "pkg:golang/github.com/snowflakedb/gosnowflake@v1.6.19",
      "type": "library",
      "name": "pkg:golang/github.com/snowflakedb/gosnowflake@v1.6.19",
      "version": "v1.6.19",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/snowflakedb/gosnowflake@v1.6.19"
    },
    {
      "bom-ref": "pkg:golang/github.com/99designs/keyring@v1.2.1",
      "type": "library",
      "name": "pkg:golang/github.com/99designs/keyring@v1.2.1",
      "version": "v1.2.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/99designs/keyring@v1.2.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/99designs/go-keychain@v0.0.0-20191008050251-8e49817e8af4",
      "type": "library",
      "name": "pkg:golang/github.com/99designs/go-keychain@v0.0.0-20191008050251-8e49817e8af4",
      "version": "v0.0.0-20191008050251-8e49817e8af4",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/99designs/go-keychain@v0.0.0-20191008050251-8e49817e8af4"
    },
    {
      "bom-ref": "pkg:golang/github.com/danieljoos/wincred@v1.2.3",
      "type": "library",
      "name": "pkg:golang/github.com/danieljoos/wincred@v1.2.3",
      "version": "v1.2.3",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/danieljoos/wincred@v1.2.3"
    },
    {
      "bom-ref": "pkg:golang/github.com/dvsekhvalnov/jose2go@v1.7.0",
      "type": "library",
      "name": "pkg:golang/github.com/dvsekhvalnov/jose2go@v1.7.0",
      "version": "v1.7.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/dvsekhvalnov/jose2go@v1.7.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/godbus/dbus@v0.0.0-20190726142602-4481cbc300e2",
      "type": "library",
      "name": "pkg:golang/github.com/godbus/dbus@v0.0.0-20190726142602-4481cbc300e2",
      "version": "v0.0.0-20190726142602-4481cbc300e2",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/godbus/dbus@v0.0.0-20190726142602-4481cbc300e2"
    },
    {
      "bom-ref": "pkg:golang/github.com/gsterjov/go-libsecret@v0.0.0-20161001094733-a6f4afe4910c",
      "type": "library",
      "name": "pkg:golang/github.com/gsterjov/go-libsecret@v0.0.0-20161001094733-a6f4afe4910c",
      "version": "v0.0.0-20161001094733-a6f4afe4910c",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/gsterjov/go-libsecret@v0.0.0-20161001094733-a6f4afe4910c"
    },
    {
      "bom-ref": "pkg:golang/github.com/mtibben/percent@v0.2.1",
      "type": "library",
      "name": "pkg:golang/github.com/mtibben/percent@v0.2.1",
      "version": "v0.2.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/mtibben/percent@v0.2.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/apache/arrow/go/v10@v10.0.1",
      "type": "library",
      "name": "pkg:golang/github.com/apache/arrow/go/v10@v10.0.1",
      "version": "v10.0.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/apache/arrow/go/v10@v10.0.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/apache/thrift@v0.16.0",
      "type": "library",
      "name": "pkg:golang/github.com/apache/thrift@v0.16.0",
      "version": "v0.16.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/apache/thrift@v0.16.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/goccy/go-json@v0.10.6",
      "type": "library",
      "name": "pkg:golang/github.com/goccy/go-json@v0.10.6",
      "version": "v0.10.6",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/goccy/go-json@v0.10.6"
    },
    {
      "bom-ref": "pkg:golang/github.com/google/flatbuffers@v25.2.10+incompatible",
      "type": "library",
      "name": "pkg:golang/github.com/google/flatbuffers@v25.2.10+incompatible",
      "version": "v25.2.10+incompatible",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/google/flatbuffers@v25.2.10+incompatible"
    },
    {
      "bom-ref": "pkg:golang/github.com/klauspost/asmfmt@v1.3.2",
      "type": "library",
      "name": "pkg:golang/github.com/klauspost/asmfmt@v1.3.2",
      "version": "v1.3.2",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/klauspost/asmfmt@v1.3.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/minio/asm2plan9s@v0.0.0-20200509001527-cdd76441f9d8",
      "type": "library",
      "name": "pkg:golang/github.com/minio/asm2plan9s@v0.0.0-20200509001527-cdd76441f9d8",
      "version": "v0.0.0-20200509001527-cdd76441f9d8",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/minio/asm2plan9s@v0.0.0-20200509001527-cdd76441f9d8"
    },
    {
      "bom-ref": "pkg:golang/github.com/minio/c2goasm@v0.0.0-20190812172519-36a3d3bbc4f3",
      "type": "library",
      "name": "pkg:golang/github.com/minio/c2goasm@v0.0.0-20190812172519-36a3d3bbc4f3",
      "version": "v0.0.0-20190812172519-36a3d3bbc4f3",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/minio/c2goasm@v0.0.0-20190812172519-36a3d3bbc4f3"
    },
    {
      "bom-ref": "pkg:golang/github.com/zeebo/xxh3@v1.0.2",
      "type": "library",
      "name": "pkg:golang/github.com/zeebo/xxh3@v1.0.2",
      "version": "v1.0.2",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/zeebo/xxh3@v1.0.2"
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/exp@v0.0.0-20260312153236-7ab1446f8b90",
      "type": "library",
      "name": "pkg:golang/golang.org/x/exp@v0.0.0-20260312153236-7ab1446f8b90",
      "version": "v0.0.0-20260312153236-7ab1446f8b90",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/golang.org/x/exp@v0.0.0-20260312153236-7ab1446f8b90"
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/xerrors@v0.0.0-20240903120638-7835f813f4da",
      "type": "library",
      "name": "pkg:golang/golang.org/x/xerrors@v0.0.0-20240903120638-7835f813f4da",
      "version": "v0.0.0-20240903120638-7835f813f4da",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/golang.org/x/xerrors@v0.0.0-20240903120638-7835f813f4da"
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.14",
      "type": "library",
      "name": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.14",
      "version": "v1.19.14",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.14"
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.21",
      "type": "library",
      "name": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.21",
      "version": "v1.18.21",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.21"
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5",
      "type": "library",
      "name": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5",
      "version": "v1.41.5",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/smithy-go@v1.24.3",
      "type": "library",
      "name": "pkg:golang/github.com/aws/smithy-go@v1.24.3",
      "version": "v1.24.3",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aws/smithy-go@v1.24.3"
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.0.9",
      "type": "library",
      "name": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.0.9",
      "version": "v1.0.9",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.0.9"
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.21",
      "type": "library",
      "name": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.21",
      "version": "v1.4.21",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.21"
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.21",
      "type": "library",
      "name": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.21",
      "version": "v2.7.21",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.21"
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.30.15",
      "type": "library",
      "name": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.30.15",
      "version": "v1.30.15",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.30.15"
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.35.19",
      "type": "library",
      "name": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.35.19",
      "version": "v1.35.19",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.35.19"
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.41.10",
      "type": "library",
      "name": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.41.10",
      "version": "v1.41.10",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.41.10"
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.7",
      "type": "library",
      "name": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.7",
      "version": "v1.13.7",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.7"
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.21",
      "type": "library",
      "name": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.21",
      "version": "v1.13.21",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.21"
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/s3/manager@v1.22.13",
      "type": "library",
      "name": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/s3/manager@v1.22.13",
      "version": "v1.22.13",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/s3/manager@v1.22.13"
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.14",
      "type": "library",
      "name": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.14",
      "version": "v1.32.14",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.14"
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/ini@v1.8.6",
      "type": "library",
      "name": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/ini@v1.8.6",
      "version": "v1.8.6",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/ini@v1.8.6"
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.99.0",
      "type": "library",
      "name": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.99.0",
      "version": "v1.99.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.99.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.8",
      "type": "library",
      "name": "pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.8",
      "version": "v1.7.8",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.8"
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.22",
      "type": "library",
      "name": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.22",
      "version": "v1.4.22",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.22"
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.9.13",
      "type": "library",
      "name": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.9.13",
      "version": "v1.9.13",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.9.13"
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.19.21",
      "type": "library",
      "name": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.19.21",
      "version": "v1.19.21",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.19.21"
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/storage/azblob@v1.6.4",
      "type": "library",
      "name": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/storage/azblob@v1.6.4",
      "version": "v1.6.4",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/storage/azblob@v1.6.4"
    },
    {
      "bom-ref": "pkg:golang/github.com/form3tech-oss/jwt-go@v3.2.5+incompatible",
      "type": "library",
      "name": "pkg:golang/github.com/form3tech-oss/jwt-go@v3.2.5+incompatible",
      "version": "v3.2.5+incompatible",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/form3tech-oss/jwt-go@v3.2.5+incompatible"
    },
    {
      "bom-ref": "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c",
      "type": "library",
      "name": "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c",
      "version": "v0.0.0-20240102092130-5ac0b6a4141c",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c"
    },
    {
      "bom-ref": "pkg:golang/github.com/xanzy/go-gitlab@v0.15.0",
      "type": "library",
      "name": "pkg:golang/github.com/xanzy/go-gitlab@v0.15.0",
      "version": "v0.15.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/xanzy/go-gitlab@v0.15.0"
    },
    {
      "bom-ref": "pkg:golang/go.mongodb.org/mongo-driver@v1.17.9",
      "type": "library",
      "name": "pkg:golang/go.mongodb.org/mongo-driver@v1.17.9",
      "version": "v1.17.9",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/go.mongodb.org/mongo-driver@v1.17.9"
    },
    {
      "bom-ref": "pkg:golang/github.com/montanaflynn/stats@v0.7.1",
      "type": "library",
      "name": "pkg:golang/github.com/montanaflynn/stats@v0.7.1",
      "version": "v0.7.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/montanaflynn/stats@v0.7.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/xdg-go/scram@v1.1.2",
      "type": "library",
      "name": "pkg:golang/github.com/xdg-go/scram@v1.1.2",
      "version": "v1.1.2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/xdg-go/scram@v1.1.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/xdg-go/pbkdf2@v1.0.0",
      "type": "library",
      "name": "pkg:golang/github.com/xdg-go/pbkdf2@v1.0.0",
      "version": "v1.0.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/xdg-go/pbkdf2@v1.0.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/xdg-go/stringprep@v1.0.4",
      "type": "library",
      "name": "pkg:golang/github.com/xdg-go/stringprep@v1.0.4",
      "version": "v1.0.4",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/xdg-go/stringprep@v1.0.4"
    },
    {
      "bom-ref": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78",
      "type": "library",
      "name": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78",
      "version": "v0.0.0-20240726163527-a2c0da244d78",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78"
    },
    {
      "bom-ref": "pkg:golang/golang.org/x/tools/godoc@v0.1.0-deprecated",
      "type": "library",
      "name": "pkg:golang/golang.org/x/tools/godoc@v0.1.0-deprecated",
      "version": "v0.1.0-deprecated",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/golang.org/x/tools/godoc@v0.1.0-deprecated"
    },
    {
      "bom-ref": "pkg:golang/modernc.org/ql@v1.0.0",
      "type": "library",
      "name": "pkg:golang/modernc.org/ql@v1.0.0",
      "version": "v1.0.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/modernc.org/ql@v1.0.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/google/go-containerregistry@v0.21.4",
      "type": "library",
      "name": "pkg:golang/github.com/google/go-containerregistry@v0.21.4",
      "version": "v0.21.4",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/google/go-containerregistry@v0.21.4"
    },
    {
      "bom-ref": "pkg:golang/github.com/containerd/stargz-snapshotter/estargz@v0.18.2",
      "type": "library",
      "name": "pkg:golang/github.com/containerd/stargz-snapshotter/estargz@v0.18.2",
      "version": "v0.18.2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/containerd/stargz-snapshotter/estargz@v0.18.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/vbatts/tar-split@v0.12.2",
      "type": "library",
      "name": "pkg:golang/github.com/vbatts/tar-split@v0.12.2",
      "version": "v0.12.2",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/vbatts/tar-split@v0.12.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/fatih/color@v1.19.0",
      "type": "library",
      "name": "pkg:golang/github.com/fatih/color@v1.19.0",
      "version": "v1.19.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/fatih/color@v1.19.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/mattn/go-colorable@v0.1.14",
      "type": "library",
      "name": "pkg:golang/github.com/mattn/go-colorable@v0.1.14",
      "version": "v0.1.14",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.14"
    },
    {
      "bom-ref": "pkg:golang/github.com/docker/cli@v29.4.0+incompatible",
      "type": "library",
      "name": "pkg:golang/github.com/docker/cli@v29.4.0+incompatible",
      "version": "v29.4.0+incompatible",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/docker/cli@v29.4.0+incompatible"
    },
    {
      "bom-ref": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1",
      "type": "library",
      "name": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1",
      "version": "v1.3.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/google/go-github/v62@v62.0.0",
      "type": "library",
      "name": "pkg:golang/github.com/google/go-github/v62@v62.0.0",
      "version": "v62.0.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/google/go-github/v62@v62.0.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/google/licensecheck@v0.3.1",
      "type": "library",
      "name": "pkg:golang/github.com/google/licensecheck@v0.3.1",
      "version": "v0.3.1",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/google/licensecheck@v0.3.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/gosimple/slug@v1.15.0",
      "type": "library",
      "name": "pkg:golang/github.com/gosimple/slug@v1.15.0",
      "version": "v1.15.0",
      "licenses": [
        {
          "license": {
            "id": "MPL-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/gosimple/slug@v1.15.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/gosimple/unidecode@v1.0.1",
      "type": "library",
      "name": "pkg:golang/github.com/gosimple/unidecode@v1.0.1",
      "version": "v1.0.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/gosimple/unidecode@v1.0.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2",
      "type": "library",
      "name": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2",
      "version": "v0.5.2",
      "licenses": [
        {
          "license": {
            "id": "MPL-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8",
      "type": "library",
      "name": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8",
      "version": "v0.7.8",
      "licenses": [
        {
          "license": {
            "id": "MPL-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8"
    },
    {
      "bom-ref": "pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7",
      "type": "library",
      "name": "pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7",
      "version": "v2.0.7",
      "licenses": [
        {
          "license": {
            "id": "MPL-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7"
    },
    {
      "bom-ref": "pkg:golang/github.com/in-toto/attestation@v1.2.0",
      "type": "library",
      "name": "pkg:golang/github.com/in-toto/attestation@v1.2.0",
      "version": "v1.2.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/in-toto/attestation@v1.2.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/in-toto/go-witness@v0.9.2",
      "type": "library",
      "name": "pkg:golang/github.com/in-toto/go-witness@v0.9.2",
      "version": "v0.9.2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/in-toto/go-witness@v0.9.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20250730155240-ffadbf3f398c",
      "type": "library",
      "name": "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20250730155240-ffadbf3f398c",
      "version": "v0.0.0-20250730155240-ffadbf3f398c",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20250730155240-ffadbf3f398c"
    },
    {
      "bom-ref": "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20250524132541-c45532741eea",
      "type": "library",
      "name": "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20250524132541-c45532741eea",
      "version": "v0.0.0-20250524132541-c45532741eea",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20250524132541-c45532741eea"
    },
    {
      "bom-ref": "pkg:golang/github.com/edwarnicke/gitoid@v0.0.0-20220710194850-1be5bfda1f9d",
      "type": "library",
      "name": "pkg:golang/github.com/edwarnicke/gitoid@v0.0.0-20220710194850-1be5bfda1f9d",
      "version": "v0.0.0-20220710194850-1be5bfda1f9d",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/edwarnicke/gitoid@v0.0.0-20220710194850-1be5bfda1f9d"
    },
    {
      "bom-ref": "pkg:golang/github.com/invopop/jsonschema@v0.13.0",
      "type": "library",
      "name": "pkg:golang/github.com/invopop/jsonschema@v0.13.0",
      "version": "v0.13.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/invopop/jsonschema@v0.13.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/wk8/go-ordered-map/v2@v2.1.8",
      "type": "library",
      "name": "pkg:golang/github.com/wk8/go-ordered-map/v2@v2.1.8",
      "version": "v2.1.8",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/wk8/go-ordered-map/v2@v2.1.8"
    },
    {
      "bom-ref": "pkg:golang/github.com/bahlo/generic-list-go@v0.2.0",
      "type": "library",
      "name": "pkg:golang/github.com/bahlo/generic-list-go@v0.2.0",
      "version": "v0.2.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/bahlo/generic-list-go@v0.2.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/buger/jsonparser@v1.1.2",
      "type": "library",
      "name": "pkg:golang/github.com/buger/jsonparser@v1.1.2",
      "version": "v1.1.2",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/buger/jsonparser@v1.1.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/mailru/easyjson@v0.9.2",
      "type": "library",
      "name": "pkg:golang/github.com/mailru/easyjson@v0.9.2",
      "version": "v0.9.2",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/mailru/easyjson@v0.9.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/open-policy-agent/opa@v1.15.1",
      "type": "library",
      "name": "pkg:golang/github.com/open-policy-agent/opa@v1.15.1",
      "version": "v1.15.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/open-policy-agent/opa@v1.15.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/fsnotify/fsnotify@v1.9.0",
      "type": "library",
      "name": "pkg:golang/github.com/fsnotify/fsnotify@v1.9.0",
      "version": "v1.9.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/fsnotify/fsnotify@v1.9.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.0.13",
      "type": "library",
      "name": "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.0.13",
      "version": "v3.0.13",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.0.13"
    },
    {
      "bom-ref": "pkg:golang/github.com/decred/dcrd/dcrec/secp256k1/v4@v4.4.1",
      "type": "library",
      "name": "pkg:golang/github.com/decred/dcrd/dcrec/secp256k1/v4@v4.4.1",
      "version": "v4.4.1",
      "licenses": [
        {
          "license": {
            "id": "ISC"
          }
        }
      ],
      "purl": "pkg:golang/github.com/decred/dcrd/dcrec/secp256k1/v4@v4.4.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4",
      "type": "library",
      "name": "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4",
      "version": "v1.0.4",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4"
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/dsig-secp256k1@v1.0.0",
      "type": "library",
      "name": "pkg:golang/github.com/lestrrat-go/dsig-secp256k1@v1.0.0",
      "version": "v1.0.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/lestrrat-go/dsig-secp256k1@v1.0.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/dsig@v1.2.1",
      "type": "library",
      "name": "pkg:golang/github.com/lestrrat-go/dsig@v1.2.1",
      "version": "v1.2.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/lestrrat-go/dsig@v1.2.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.5",
      "type": "library",
      "name": "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.5",
      "version": "v3.0.5",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1",
      "type": "library",
      "name": "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1",
      "version": "v1.0.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0",
      "type": "library",
      "name": "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0",
      "version": "v2.0.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/valyala/fastjson@v1.6.10",
      "type": "library",
      "name": "pkg:golang/github.com/valyala/fastjson@v1.6.10",
      "version": "v1.6.10",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/valyala/fastjson@v1.6.10"
    },
    {
      "bom-ref": "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9",
      "type": "library",
      "name": "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9",
      "version": "v0.0.0-20250401214520-65e299d6c5c9",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9"
    },
    {
      "bom-ref": "pkg:golang/github.com/spf13/viper@v1.21.0",
      "type": "library",
      "name": "pkg:golang/github.com/spf13/viper@v1.21.0",
      "version": "v1.21.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/spf13/viper@v1.21.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/pelletier/go-toml/v2@v2.3.0",
      "type": "library",
      "name": "pkg:golang/github.com/pelletier/go-toml/v2@v2.3.0",
      "version": "v2.3.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/pelletier/go-toml/v2@v2.3.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/sagikazarmark/locafero@v0.12.0",
      "type": "library",
      "name": "pkg:golang/github.com/sagikazarmark/locafero@v0.12.0",
      "version": "v0.12.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/sagikazarmark/locafero@v0.12.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/spf13/afero@v1.15.0",
      "type": "library",
      "name": "pkg:golang/github.com/spf13/afero@v1.15.0",
      "version": "v1.15.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/spf13/afero@v1.15.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/spf13/cast@v1.10.0",
      "type": "library",
      "name": "pkg:golang/github.com/spf13/cast@v1.10.0",
      "version": "v1.10.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/spf13/cast@v1.10.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/subosito/gotenv@v1.6.0",
      "type": "library",
      "name": "pkg:golang/github.com/subosito/gotenv@v1.6.0",
      "version": "v1.6.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/subosito/gotenv@v1.6.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3",
      "type": "library",
      "name": "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3",
      "version": "v2.3.3",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3"
    },
    {
      "bom-ref": "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.32",
      "type": "library",
      "name": "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.32",
      "version": "v2.5.32",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.32"
    },
    {
      "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415",
      "type": "library",
      "name": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415",
      "version": "v0.0.0-20180127040603-bd5ef7bd5415",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415"
    },
    {
      "bom-ref": "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0",
      "type": "library",
      "name": "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0",
      "version": "v0.2.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0"
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0",
      "type": "library",
      "name": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0",
      "version": "v1.43.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0"
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0",
      "type": "library",
      "name": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0",
      "version": "v1.43.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0"
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0",
      "type": "library",
      "name": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0",
      "version": "v1.43.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0"
    },
    {
      "bom-ref": "pkg:golang/gopkg.in/ini.v1@v1.67.1",
      "type": "library",
      "name": "pkg:golang/gopkg.in/ini.v1@v1.67.1",
      "version": "v1.67.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/gopkg.in/ini.v1@v1.67.1"
    },
    {
      "bom-ref": "pkg:golang/oras.land/oras-go/v2@v2.6.0",
      "type": "library",
      "name": "pkg:golang/oras.land/oras-go/v2@v2.6.0",
      "version": "v2.6.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/oras.land/oras-go/v2@v2.6.0"
    },
    {
      "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.6.0",
      "type": "library",
      "name": "pkg:golang/sigs.k8s.io/yaml@v1.6.0",
      "version": "v1.6.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/sigs.k8s.io/yaml@v1.6.0"
    },
    {
      "bom-ref": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4",
      "type": "library",
      "name": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4",
      "version": "v2.4.4",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4"
    },
    {
      "bom-ref": "pkg:golang/sigs.k8s.io/randfill@v1.0.0",
      "type": "library",
      "name": "pkg:golang/sigs.k8s.io/randfill@v1.0.0",
      "version": "v1.0.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/sigs.k8s.io/randfill@v1.0.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/openvex/go-vex@v0.2.8",
      "type": "library",
      "name": "pkg:golang/github.com/openvex/go-vex@v0.2.8",
      "version": "v0.2.8",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/openvex/go-vex@v0.2.8"
    },
    {
      "bom-ref": "pkg:golang/github.com/package-url/packageurl-go@v0.1.5",
      "type": "library",
      "name": "pkg:golang/github.com/package-url/packageurl-go@v0.1.5",
      "version": "v0.1.5",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/package-url/packageurl-go@v0.1.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.10.0",
      "type": "library",
      "name": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.10.0",
      "version": "v0.10.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.10.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/cosign/v2@v2.6.3",
      "type": "library",
      "name": "pkg:golang/github.com/sigstore/cosign/v2@v2.6.3",
      "version": "v2.6.3",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/sigstore/cosign/v2@v2.6.3"
    },
    {
      "bom-ref": "pkg:golang/cuelang.org/go@v0.16.0",
      "type": "library",
      "name": "pkg:golang/cuelang.org/go@v0.16.0",
      "version": "v0.16.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/cuelang.org/go@v0.16.0"
    },
    {
      "bom-ref": "pkg:golang/cuelabs.dev/go/oci/ociregistry@v0.0.0-20251212221603-3adeb8663819",
      "type": "library",
      "name": "pkg:golang/cuelabs.dev/go/oci/ociregistry@v0.0.0-20251212221603-3adeb8663819",
      "version": "v0.0.0-20251212221603-3adeb8663819",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/cuelabs.dev/go/oci/ociregistry@v0.0.0-20251212221603-3adeb8663819"
    },
    {
      "bom-ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.14.1",
      "type": "library",
      "name": "pkg:golang/github.com/rogpeppe/go-internal@v1.14.1",
      "version": "v1.14.1",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/rogpeppe/go-internal@v1.14.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/cockroachdb/apd/v3@v3.2.3",
      "type": "library",
      "name": "pkg:golang/github.com/cockroachdb/apd/v3@v3.2.3",
      "version": "v3.2.3",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/cockroachdb/apd/v3@v3.2.3"
    },
    {
      "bom-ref": "pkg:golang/github.com/emicklei/proto@v1.14.3",
      "type": "library",
      "name": "pkg:golang/github.com/emicklei/proto@v1.14.3",
      "version": "v1.14.3",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/emicklei/proto@v1.14.3"
    },
    {
      "bom-ref": "pkg:golang/github.com/protocolbuffers/txtpbfmt@v0.0.0-20260217160748-a481f6a22f94",
      "type": "library",
      "name": "pkg:golang/github.com/protocolbuffers/txtpbfmt@v0.0.0-20260217160748-a481f6a22f94",
      "version": "v0.0.0-20260217160748-a481f6a22f94",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/protocolbuffers/txtpbfmt@v0.0.0-20260217160748-a481f6a22f94"
    },
    {
      "bom-ref": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1",
      "type": "library",
      "name": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1",
      "version": "v1.0.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/awslabs/amazon-ecr-credential-helper/ecr-login@v0.12.0",
      "type": "library",
      "name": "pkg:golang/github.com/awslabs/amazon-ecr-credential-helper/ecr-login@v0.12.0",
      "version": "v0.12.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/awslabs/amazon-ecr-credential-helper/ecr-login@v0.12.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.56.2",
      "type": "library",
      "name": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.56.2",
      "version": "v1.56.2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.56.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecrpublic@v1.38.13",
      "type": "library",
      "name": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecrpublic@v1.38.13",
      "version": "v1.38.13",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecrpublic@v1.38.13"
    },
    {
      "bom-ref": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5",
      "type": "library",
      "name": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5",
      "version": "v0.9.5",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/buildkite/agent/v3@v3.121.1",
      "type": "library",
      "name": "pkg:golang/github.com/buildkite/agent/v3@v3.121.1",
      "version": "v3.121.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/buildkite/agent/v3@v3.121.1"
    },
    {
      "bom-ref": "pkg:golang/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go@v1.36.11-20260209202127-80ab13bee0bf.1",
      "type": "library",
      "name": "pkg:golang/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go@v1.36.11-20260209202127-80ab13bee0bf.1",
      "version": "v1.36.11-20260209202127-80ab13bee0bf.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go@v1.36.11-20260209202127-80ab13bee0bf.1"
    },
    {
      "bom-ref": "pkg:golang/connectrpc.com/connect@v1.19.1",
      "type": "library",
      "name": "pkg:golang/connectrpc.com/connect@v1.19.1",
      "version": "v1.19.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/connectrpc.com/connect@v1.19.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/buildkite/go-pipeline@v0.16.0",
      "type": "library",
      "name": "pkg:golang/github.com/buildkite/go-pipeline@v0.16.0",
      "version": "v0.16.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/buildkite/go-pipeline@v0.16.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/buildkite/interpolate@v0.1.5",
      "type": "library",
      "name": "pkg:golang/github.com/buildkite/interpolate@v0.1.5",
      "version": "v0.1.5",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/buildkite/interpolate@v0.1.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/jwx/v2@v2.1.6",
      "type": "library",
      "name": "pkg:golang/github.com/lestrrat-go/jwx/v2@v2.1.6",
      "version": "v2.1.6",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/lestrrat-go/jwx/v2@v2.1.6"
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/httprc@v1.0.6",
      "type": "library",
      "name": "pkg:golang/github.com/lestrrat-go/httprc@v1.0.6",
      "version": "v1.0.6",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/lestrrat-go/httprc@v1.0.6"
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/option@v1.0.1",
      "type": "library",
      "name": "pkg:golang/github.com/lestrrat-go/option@v1.0.1",
      "version": "v1.0.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/lestrrat-go/option@v1.0.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/lestrrat-go/iter@v1.0.2",
      "type": "library",
      "name": "pkg:golang/github.com/lestrrat-go/iter@v1.0.2",
      "version": "v1.0.2",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/lestrrat-go/iter@v1.0.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/oleiade/reflections@v1.1.0",
      "type": "library",
      "name": "pkg:golang/github.com/oleiade/reflections@v1.1.0",
      "version": "v1.1.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/oleiade/reflections@v1.1.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/buildkite/roko@v1.4.0",
      "type": "library",
      "name": "pkg:golang/github.com/buildkite/roko@v1.4.0",
      "version": "v1.4.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/buildkite/roko@v1.4.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-chi/chi/v5@v5.2.5",
      "type": "library",
      "name": "pkg:golang/github.com/go-chi/chi/v5@v5.2.5",
      "version": "v5.2.5",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-chi/chi/v5@v5.2.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/pborman/uuid@v1.2.1",
      "type": "library",
      "name": "pkg:golang/github.com/pborman/uuid@v1.2.1",
      "version": "v1.2.1",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/pborman/uuid@v1.2.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589",
      "type": "library",
      "name": "pkg:golang/github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589",
      "version": "v0.0.0-20230304212654-82a0ddb27589",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589"
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go@v68.0.0+incompatible",
      "type": "library",
      "name": "pkg:golang/github.com/azure/azure-sdk-for-go@v68.0.0+incompatible",
      "version": "v68.0.0+incompatible",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/azure/azure-sdk-for-go@v68.0.0+incompatible"
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/azure/auth@v0.5.13",
      "type": "library",
      "name": "pkg:golang/github.com/azure/go-autorest/autorest/azure/auth@v0.5.13",
      "version": "v0.5.13",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/azure/go-autorest/autorest/azure/auth@v0.5.13"
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/azure/cli@v0.4.7",
      "type": "library",
      "name": "pkg:golang/github.com/azure/go-autorest/autorest/azure/cli@v0.4.7",
      "version": "v0.4.7",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/azure/go-autorest/autorest/azure/cli@v0.4.7"
    },
    {
      "bom-ref": "pkg:golang/github.com/dimchansky/utfbom@v1.1.1",
      "type": "library",
      "name": "pkg:golang/github.com/dimchansky/utfbom@v1.1.1",
      "version": "v1.1.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/dimchansky/utfbom@v1.1.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest@v0.11.30",
      "type": "library",
      "name": "pkg:golang/github.com/azure/go-autorest/autorest@v0.11.30",
      "version": "v0.11.30",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/azure/go-autorest/autorest@v0.11.30"
    },
    {
      "bom-ref": "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467",
      "type": "library",
      "name": "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467",
      "version": "v0.0.0-20241213102144-19d51d7fe467",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/runtime@v0.29.3",
      "type": "library",
      "name": "pkg:golang/github.com/go-openapi/runtime@v0.29.3",
      "version": "v0.29.3",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-openapi/runtime@v0.29.3"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/analysis@v0.25.0",
      "type": "library",
      "name": "pkg:golang/github.com/go-openapi/analysis@v0.25.0",
      "version": "v0.25.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-openapi/analysis@v0.25.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.22.5",
      "type": "library",
      "name": "pkg:golang/github.com/go-openapi/jsonpointer@v0.22.5",
      "version": "v0.22.5",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-openapi/jsonpointer@v0.22.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/jsonname@v0.25.5",
      "type": "library",
      "name": "pkg:golang/github.com/go-openapi/swag/jsonname@v0.25.5",
      "version": "v0.25.5",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-openapi/swag/jsonname@v0.25.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/spec@v0.22.4",
      "type": "library",
      "name": "pkg:golang/github.com/go-openapi/spec@v0.22.4",
      "version": "v0.22.4",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-openapi/spec@v0.22.4"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.21.5",
      "type": "library",
      "name": "pkg:golang/github.com/go-openapi/jsonreference@v0.21.5",
      "version": "v0.21.5",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-openapi/jsonreference@v0.21.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/conv@v0.25.5",
      "type": "library",
      "name": "pkg:golang/github.com/go-openapi/swag/conv@v0.25.5",
      "version": "v0.25.5",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-openapi/swag/conv@v0.25.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/typeutils@v0.25.5",
      "type": "library",
      "name": "pkg:golang/github.com/go-openapi/swag/typeutils@v0.25.5",
      "version": "v0.25.5",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-openapi/swag/typeutils@v0.25.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.25.5",
      "type": "library",
      "name": "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.25.5",
      "version": "v0.25.5",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.25.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/loading@v0.25.5",
      "type": "library",
      "name": "pkg:golang/github.com/go-openapi/swag/loading@v0.25.5",
      "version": "v0.25.5",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-openapi/swag/loading@v0.25.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.25.5",
      "type": "library",
      "name": "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.25.5",
      "version": "v0.25.5",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.25.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/stringutils@v0.25.5",
      "type": "library",
      "name": "pkg:golang/github.com/go-openapi/swag/stringutils@v0.25.5",
      "version": "v0.25.5",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-openapi/swag/stringutils@v0.25.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/strfmt@v0.26.1",
      "type": "library",
      "name": "pkg:golang/github.com/go-openapi/strfmt@v0.26.1",
      "version": "v0.26.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-openapi/strfmt@v0.26.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/errors@v0.22.7",
      "type": "library",
      "name": "pkg:golang/github.com/go-openapi/errors@v0.22.7",
      "version": "v0.22.7",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-openapi/errors@v0.22.7"
    },
    {
      "bom-ref": "pkg:golang/github.com/oklog/ulid/v2@v2.1.1",
      "type": "library",
      "name": "pkg:golang/github.com/oklog/ulid/v2@v2.1.1",
      "version": "v2.1.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/oklog/ulid/v2@v2.1.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/mangling@v0.25.5",
      "type": "library",
      "name": "pkg:golang/github.com/go-openapi/swag/mangling@v0.25.5",
      "version": "v0.25.5",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-openapi/swag/mangling@v0.25.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/loads@v0.23.3",
      "type": "library",
      "name": "pkg:golang/github.com/go-openapi/loads@v0.23.3",
      "version": "v0.23.3",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-openapi/loads@v0.23.3"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/fileutils@v0.25.5",
      "type": "library",
      "name": "pkg:golang/github.com/go-openapi/swag/fileutils@v0.25.5",
      "version": "v0.25.5",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-openapi/swag/fileutils@v0.25.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/validate@v0.25.2",
      "type": "library",
      "name": "pkg:golang/github.com/go-openapi/validate@v0.25.2",
      "version": "v0.25.2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-openapi/validate@v0.25.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag@v0.25.5",
      "type": "library",
      "name": "pkg:golang/github.com/go-openapi/swag@v0.25.5",
      "version": "v0.25.5",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-openapi/swag@v0.25.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.25.5",
      "type": "library",
      "name": "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.25.5",
      "version": "v0.25.5",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.25.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-openapi/swag/netutils@v0.25.5",
      "type": "library",
      "name": "pkg:golang/github.com/go-openapi/swag/netutils@v0.25.5",
      "version": "v0.25.5",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-openapi/swag/netutils@v0.25.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/go-piv/piv-go/v2@v2.5.0",
      "type": "library",
      "name": "pkg:golang/github.com/go-piv/piv-go/v2@v2.5.0",
      "version": "v2.5.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/go-piv/piv-go/v2@v2.5.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/google/certificate-transparency-go@v1.3.3",
      "type": "library",
      "name": "pkg:golang/github.com/google/certificate-transparency-go@v1.3.3",
      "version": "v1.3.3",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/google/certificate-transparency-go@v1.3.3"
    },
    {
      "bom-ref": "pkg:golang/github.com/transparency-dev/merkle@v0.0.2",
      "type": "library",
      "name": "pkg:golang/github.com/transparency-dev/merkle@v0.0.2",
      "version": "v0.0.2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/transparency-dev/merkle@v0.0.2"
    },
    {
      "bom-ref": "pkg:golang/k8s.io/klog/v2@v2.140.0",
      "type": "library",
      "name": "pkg:golang/k8s.io/klog/v2@v2.140.0",
      "version": "v2.140.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/k8s.io/klog/v2@v2.140.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/google/go-github/v73@v73.0.0",
      "type": "library",
      "name": "pkg:golang/github.com/google/go-github/v73@v73.0.0",
      "version": "v73.0.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/google/go-github/v73@v73.0.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/in-toto/in-toto-golang@v0.10.0",
      "type": "library",
      "name": "pkg:golang/github.com/in-toto/in-toto-golang@v0.10.0",
      "version": "v0.10.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/in-toto/in-toto-golang@v0.10.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0",
      "type": "library",
      "name": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0",
      "version": "v1.3.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/manifoldco/promptui@v0.9.0",
      "type": "library",
      "name": "pkg:golang/github.com/manifoldco/promptui@v0.9.0",
      "version": "v0.9.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/manifoldco/promptui@v0.9.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/chzyer/readline@v1.5.1",
      "type": "library",
      "name": "pkg:golang/github.com/chzyer/readline@v1.5.1",
      "version": "v1.5.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/chzyer/readline@v1.5.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/miekg/pkcs11@v1.1.2",
      "type": "library",
      "name": "pkg:golang/github.com/miekg/pkcs11@v1.1.2",
      "version": "v1.1.2",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/miekg/pkcs11@v1.1.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/mozillazg/docker-credential-acr-helper@v0.4.0",
      "type": "library",
      "name": "pkg:golang/github.com/mozillazg/docker-credential-acr-helper@v0.4.0",
      "version": "v0.4.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/mozillazg/docker-credential-acr-helper@v0.4.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/alibabacloud-go/cr-20160607@v1.0.1",
      "type": "library",
      "name": "pkg:golang/github.com/alibabacloud-go/cr-20160607@v1.0.1",
      "version": "v1.0.1",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/alibabacloud-go/cr-20160607@v1.0.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/alibabacloud-go/darabonba-openapi@v0.2.1",
      "type": "library",
      "name": "pkg:golang/github.com/alibabacloud-go/darabonba-openapi@v0.2.1",
      "version": "v0.2.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/alibabacloud-go/darabonba-openapi@v0.2.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/alibabacloud-go/alibabacloud-gateway-spi@v0.0.5",
      "type": "library",
      "name": "pkg:golang/github.com/alibabacloud-go/alibabacloud-gateway-spi@v0.0.5",
      "version": "v0.0.5",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/alibabacloud-go/alibabacloud-gateway-spi@v0.0.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/alibabacloud-go/tea@v1.4.0",
      "type": "library",
      "name": "pkg:golang/github.com/alibabacloud-go/tea@v1.4.0",
      "version": "v1.4.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/alibabacloud-go/tea@v1.4.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/alibabacloud-go/debug@v1.0.1",
      "type": "library",
      "name": "pkg:golang/github.com/alibabacloud-go/debug@v1.0.1",
      "version": "v1.0.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/alibabacloud-go/debug@v1.0.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/alibabacloud-go/tea-utils/v2@v2.0.9",
      "type": "library",
      "name": "pkg:golang/github.com/alibabacloud-go/tea-utils/v2@v2.0.9",
      "version": "v2.0.9",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/alibabacloud-go/tea-utils/v2@v2.0.9"
    },
    {
      "bom-ref": "pkg:golang/github.com/clbanning/mxj/v2@v2.7.0",
      "type": "library",
      "name": "pkg:golang/github.com/clbanning/mxj/v2@v2.7.0",
      "version": "v2.7.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/clbanning/mxj/v2@v2.7.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.12",
      "type": "library",
      "name": "pkg:golang/github.com/json-iterator/go@v1.1.12",
      "version": "v1.1.12",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12"
    },
    {
      "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd",
      "type": "library",
      "name": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd",
      "version": "v0.0.0-20180306012644-bacd9c7ef1dd",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd"
    },
    {
      "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee",
      "type": "library",
      "name": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee",
      "version": "v1.0.3-0.20250322232337-35a7c28c31ee",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee"
    },
    {
      "bom-ref": "pkg:golang/github.com/aliyun/credentials-go@v1.4.12",
      "type": "library",
      "name": "pkg:golang/github.com/aliyun/credentials-go@v1.4.12",
      "version": "v1.4.12",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aliyun/credentials-go@v1.4.12"
    },
    {
      "bom-ref": "pkg:golang/github.com/alibabacloud-go/openapi-util@v0.1.2",
      "type": "library",
      "name": "pkg:golang/github.com/alibabacloud-go/openapi-util@v0.1.2",
      "version": "v0.1.2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/alibabacloud-go/openapi-util@v0.1.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/tjfoc/gmsm@v1.4.1",
      "type": "library",
      "name": "pkg:golang/github.com/tjfoc/gmsm@v1.4.1",
      "version": "v1.4.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/tjfoc/gmsm@v1.4.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/alibabacloud-go/tea-utils@v1.4.5",
      "type": "library",
      "name": "pkg:golang/github.com/alibabacloud-go/tea-utils@v1.4.5",
      "version": "v1.4.5",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/alibabacloud-go/tea-utils@v1.4.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/alibabacloud-go/tea-xml@v1.1.3",
      "type": "library",
      "name": "pkg:golang/github.com/alibabacloud-go/tea-xml@v1.1.3",
      "version": "v1.1.3",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/alibabacloud-go/tea-xml@v1.1.3"
    },
    {
      "bom-ref": "pkg:golang/github.com/alibabacloud-go/endpoint-util@v1.1.1",
      "type": "library",
      "name": "pkg:golang/github.com/alibabacloud-go/endpoint-util@v1.1.1",
      "version": "v1.1.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/alibabacloud-go/endpoint-util@v1.1.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/alibabacloud-go/cr-20181201@v1.0.10",
      "type": "library",
      "name": "pkg:golang/github.com/alibabacloud-go/cr-20181201@v1.0.10",
      "version": "v1.0.10",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/alibabacloud-go/cr-20181201@v1.0.10"
    },
    {
      "bom-ref": "pkg:golang/github.com/aliyuncontainerservice/ack-ram-tool/pkg/credentials/provider@v0.20.0",
      "type": "library",
      "name": "pkg:golang/github.com/aliyuncontainerservice/ack-ram-tool/pkg/credentials/provider@v0.20.0",
      "version": "v0.20.0",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aliyuncontainerservice/ack-ram-tool/pkg/credentials/provider@v0.20.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/aliyuncontainerservice/ack-ram-tool/pkg/ecsmetadata@v0.0.10",
      "type": "library",
      "name": "pkg:golang/github.com/aliyuncontainerservice/ack-ram-tool/pkg/ecsmetadata@v0.0.10",
      "version": "v0.0.10",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/aliyuncontainerservice/ack-ram-tool/pkg/ecsmetadata@v0.0.10"
    },
    {
      "bom-ref": "pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481",
      "type": "library",
      "name": "pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481",
      "version": "v0.0.0-20180817012639-2ea982251481",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481"
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/fulcio@v1.8.5",
      "type": "library",
      "name": "pkg:golang/github.com/sigstore/fulcio@v1.8.5",
      "version": "v1.8.5",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/sigstore/fulcio@v1.8.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2",
      "type": "library",
      "name": "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2",
      "version": "v0.0.0-20230301143203-a9d515a09cc2",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2"
    },
    {
      "bom-ref": "pkg:golang/github.com/coreos/go-oidc/v3@v3.18.0",
      "type": "library",
      "name": "pkg:golang/github.com/coreos/go-oidc/v3@v3.18.0",
      "version": "v3.18.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/coreos/go-oidc/v3@v3.18.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1",
      "type": "library",
      "name": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1",
      "version": "v0.5.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/sigstore@v1.10.5",
      "type": "library",
      "name": "pkg:golang/github.com/sigstore/sigstore@v1.10.5",
      "version": "v1.10.5",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/sigstore/sigstore@v1.10.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/letsencrypt/boulder@v0.20260406.0",
      "type": "library",
      "name": "pkg:golang/github.com/letsencrypt/boulder@v0.20260406.0",
      "version": "v0.20260406.0",
      "licenses": [
        {
          "license": {
            "id": "MPL-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/letsencrypt/boulder@v0.20260406.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/titanous/rocacheck@v0.0.0-20171023193734-afe73141d399",
      "type": "library",
      "name": "pkg:golang/github.com/titanous/rocacheck@v0.0.0-20171023193734-afe73141d399",
      "version": "v0.0.0-20171023193734-afe73141d399",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/titanous/rocacheck@v0.0.0-20171023193734-afe73141d399"
    },
    {
      "bom-ref": "pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0",
      "type": "library",
      "name": "pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0",
      "version": "v0.7.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/syndtr/goleveldb@v1.0.1-0.20220721030215-126854af5e6d",
      "type": "library",
      "name": "pkg:golang/github.com/syndtr/goleveldb@v1.0.1-0.20220721030215-126854af5e6d",
      "version": "v1.0.1-0.20220721030215-126854af5e6d",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/syndtr/goleveldb@v1.0.1-0.20220721030215-126854af5e6d"
    },
    {
      "bom-ref": "pkg:golang/github.com/thalesignite/crypto11@v1.2.5",
      "type": "library",
      "name": "pkg:golang/github.com/thalesignite/crypto11@v1.2.5",
      "version": "v1.2.5",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/thalesignite/crypto11@v1.2.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/thales-e-security/pool@v0.0.2",
      "type": "library",
      "name": "pkg:golang/github.com/thales-e-security/pool@v0.0.2",
      "version": "v0.0.2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/thales-e-security/pool@v0.0.2"
    },
    {
      "bom-ref": "pkg:golang/go.step.sm/crypto@v0.77.2",
      "type": "library",
      "name": "pkg:golang/go.step.sm/crypto@v0.77.2",
      "version": "v0.77.2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/go.step.sm/crypto@v0.77.2"
    },
    {
      "bom-ref": "pkg:golang/sigs.k8s.io/release-utils@v0.12.4",
      "type": "library",
      "name": "pkg:golang/sigs.k8s.io/release-utils@v0.12.4",
      "version": "v0.12.4",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/sigs.k8s.io/release-utils@v0.12.4"
    },
    {
      "bom-ref": "pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20210622060536-734e95fb86be",
      "type": "library",
      "name": "pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20210622060536-734e95fb86be",
      "version": "v0.0.0-20210622060536-734e95fb86be",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20210622060536-734e95fb86be"
    },
    {
      "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20260319190234-28399d86e0b5",
      "type": "library",
      "name": "pkg:golang/k8s.io/utils@v0.0.0-20260319190234-28399d86e0b5",
      "version": "v0.0.0-20260319190234-28399d86e0b5",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/k8s.io/utils@v0.0.0-20260319190234-28399d86e0b5"
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/rekor-tiles/v2@v2.2.1",
      "type": "library",
      "name": "pkg:golang/github.com/sigstore/rekor-tiles/v2@v2.2.1",
      "version": "v2.2.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/sigstore/rekor-tiles/v2@v2.2.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/sigstore-go@v1.1.4",
      "type": "library",
      "name": "pkg:golang/github.com/sigstore/sigstore-go@v1.1.4",
      "version": "v1.1.4",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/sigstore/sigstore-go@v1.1.4"
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/rekor@v1.5.1",
      "type": "library",
      "name": "pkg:golang/github.com/sigstore/rekor@v1.5.1",
      "version": "v1.5.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/sigstore/rekor@v1.5.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/blang/semver@v3.5.1+incompatible",
      "type": "library",
      "name": "pkg:golang/github.com/blang/semver@v3.5.1+incompatible",
      "version": "v3.5.1+incompatible",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/blang/semver@v3.5.1+incompatible"
    },
    {
      "bom-ref": "pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20241212093149-d2f9f49435c7",
      "type": "library",
      "name": "pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20241212093149-d2f9f49435c7",
      "version": "v0.0.0-20241212093149-d2f9f49435c7",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20241212093149-d2f9f49435c7"
    },
    {
      "bom-ref": "pkg:golang/github.com/sassoftware/relic@v7.2.1+incompatible",
      "type": "library",
      "name": "pkg:golang/github.com/sassoftware/relic@v7.2.1+incompatible",
      "version": "v7.2.1+incompatible",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/sassoftware/relic@v7.2.1+incompatible"
    },
    {
      "bom-ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0",
      "type": "library",
      "name": "pkg:golang/gopkg.in/yaml.v2@v2.4.0",
      "version": "v2.4.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/gopkg.in/yaml.v2@v2.4.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/sigstore/timestamp-authority/v2@v2.0.5",
      "type": "library",
      "name": "pkg:golang/github.com/sigstore/timestamp-authority/v2@v2.0.5",
      "version": "v2.0.5",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/sigstore/timestamp-authority/v2@v2.0.5"
    },
    {
      "bom-ref": "pkg:golang/github.com/theupdateframework/go-tuf/v2@v2.4.1",
      "type": "library",
      "name": "pkg:golang/github.com/theupdateframework/go-tuf/v2@v2.4.1",
      "version": "v2.4.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/theupdateframework/go-tuf/v2@v2.4.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/transparency-dev/formats@v0.1.0",
      "type": "library",
      "name": "pkg:golang/github.com/transparency-dev/formats@v0.1.0",
      "version": "v0.1.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/transparency-dev/formats@v0.1.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/withfig/autocomplete-tools/integrations/cobra@v1.2.1",
      "type": "library",
      "name": "pkg:golang/github.com/withfig/autocomplete-tools/integrations/cobra@v1.2.1",
      "version": "v1.2.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/withfig/autocomplete-tools/integrations/cobra@v1.2.1"
    },
    {
      "bom-ref": "pkg:golang/gitlab.com/gitlab-org/api/client-go@v1.46.0",
      "type": "library",
      "name": "pkg:golang/gitlab.com/gitlab-org/api/client-go@v1.46.0",
      "version": "v1.46.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/gitlab.com/gitlab-org/api/client-go@v1.46.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/zalando/go-keyring@v0.2.8",
      "type": "library",
      "name": "pkg:golang/github.com/zalando/go-keyring@v0.2.8",
      "version": "v0.2.8",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/zalando/go-keyring@v0.2.8"
    },
    {
      "bom-ref": "pkg:golang/github.com/godbus/dbus/v5@v5.2.2",
      "type": "library",
      "name": "pkg:golang/github.com/godbus/dbus/v5@v5.2.2",
      "version": "v5.2.2",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/godbus/dbus/v5@v5.2.2"
    },
    {
      "bom-ref": "pkg:golang/k8s.io/api@v0.35.3",
      "type": "library",
      "name": "pkg:golang/k8s.io/api@v0.35.3",
      "version": "v0.35.3",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/k8s.io/api@v0.35.3"
    },
    {
      "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.35.3",
      "type": "library",
      "name": "pkg:golang/k8s.io/apimachinery@v0.35.3",
      "version": "v0.35.3",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/k8s.io/apimachinery@v0.35.3"
    },
    {
      "bom-ref": "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.1",
      "type": "library",
      "name": "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.1",
      "version": "v2.9.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/x448/float16@v0.8.4",
      "type": "library",
      "name": "pkg:golang/github.com/x448/float16@v0.8.4",
      "version": "v0.8.4",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/x448/float16@v0.8.4"
    },
    {
      "bom-ref": "pkg:golang/github.com/google/gnostic-models@v0.7.1",
      "type": "library",
      "name": "pkg:golang/github.com/google/gnostic-models@v0.7.1",
      "version": "v0.7.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/google/gnostic-models@v0.7.1"
    },
    {
      "bom-ref": "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0",
      "type": "library",
      "name": "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0",
      "version": "v4.13.0",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0"
    },
    {
      "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20260330154417-16be699c7b31",
      "type": "library",
      "name": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20260330154417-16be699c7b31",
      "version": "v0.0.0-20260330154417-16be699c7b31",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20260330154417-16be699c7b31"
    },
    {
      "bom-ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0",
      "type": "library",
      "name": "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0",
      "version": "v3.13.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822",
      "type": "library",
      "name": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822",
      "version": "v0.0.0-20191010083416-a7dc8b61c822",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822"
    },
    {
      "bom-ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730",
      "type": "library",
      "name": "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730",
      "version": "v0.0.0-20250730193827-2d320260d730",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730"
    },
    {
      "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.2",
      "type": "library",
      "name": "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.2",
      "version": "v6.3.2",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.2"
    },
    {
      "bom-ref": "pkg:golang/k8s.io/client-go@v0.35.3",
      "type": "library",
      "name": "pkg:golang/k8s.io/client-go@v0.35.3",
      "version": "v0.35.3",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/k8s.io/client-go@v0.35.3"
    },
    {
      "bom-ref": "pkg:golang/gopkg.in/go-jose/go-jose.v2@v2.6.3",
      "type": "library",
      "name": "pkg:golang/gopkg.in/go-jose/go-jose.v2@v2.6.3",
      "version": "v2.6.3",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/gopkg.in/go-jose/go-jose.v2@v2.6.3"
    },
    {
      "bom-ref": "pkg:golang/github.com/joho/godotenv@v1.5.1",
      "type": "library",
      "name": "pkg:golang/github.com/joho/godotenv@v1.5.1",
      "version": "v1.5.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/joho/godotenv@v1.5.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/knqyf263/go-apk-version@v0.0.0-20200609155635-041fdbb8563f",
      "type": "library",
      "name": "pkg:golang/github.com/knqyf263/go-apk-version@v0.0.0-20200609155635-041fdbb8563f",
      "version": "v0.0.0-20200609155635-041fdbb8563f",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/knqyf263/go-apk-version@v0.0.0-20200609155635-041fdbb8563f"
    },
    {
      "bom-ref": "pkg:golang/github.com/knqyf263/go-deb-version@v0.0.0-20241115132648-6f4aee6ccd23",
      "type": "library",
      "name": "pkg:golang/github.com/knqyf263/go-deb-version@v0.0.0-20241115132648-6f4aee6ccd23",
      "version": "v0.0.0-20241115132648-6f4aee6ccd23",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/knqyf263/go-deb-version@v0.0.0-20241115132648-6f4aee6ccd23"
    },
    {
      "bom-ref": "pkg:golang/github.com/knqyf263/go-rpm-version@v0.0.0-20240918084003-2afd7dc6a38f",
      "type": "library",
      "name": "pkg:golang/github.com/knqyf263/go-rpm-version@v0.0.0-20240918084003-2afd7dc6a38f",
      "version": "v0.0.0-20240918084003-2afd7dc6a38f",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/knqyf263/go-rpm-version@v0.0.0-20240918084003-2afd7dc6a38f"
    },
    {
      "bom-ref": "pkg:golang/github.com/labstack/echo/v4@v4.15.1",
      "type": "library",
      "name": "pkg:golang/github.com/labstack/echo/v4@v4.15.1",
      "version": "v4.15.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/labstack/echo/v4@v4.15.1"
    },
    {
      "bom-ref": "pkg:golang/github.com/labstack/gommon@v0.4.2",
      "type": "library",
      "name": "pkg:golang/github.com/labstack/gommon@v0.4.2",
      "version": "v0.4.2",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/labstack/gommon@v0.4.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/valyala/fasttemplate@v1.2.2",
      "type": "library",
      "name": "pkg:golang/github.com/valyala/fasttemplate@v1.2.2",
      "version": "v1.2.2",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/valyala/fasttemplate@v1.2.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/valyala/bytebufferpool@v1.0.0",
      "type": "library",
      "name": "pkg:golang/github.com/valyala/bytebufferpool@v1.0.0",
      "version": "v1.0.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/valyala/bytebufferpool@v1.0.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/lmittmann/tint@v1.1.3",
      "type": "library",
      "name": "pkg:golang/github.com/lmittmann/tint@v1.1.3",
      "version": "v1.1.3",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/lmittmann/tint@v1.1.3"
    },
    {
      "bom-ref": "pkg:golang/github.com/mitchellh/colorstring@v0.0.0-20190213212951-d06e56a500db",
      "type": "library",
      "name": "pkg:golang/github.com/mitchellh/colorstring@v0.0.0-20190213212951-d06e56a500db",
      "version": "v0.0.0-20190213212951-d06e56a500db",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/mitchellh/colorstring@v0.0.0-20190213212951-d06e56a500db"
    },
    {
      "bom-ref": "pkg:golang/github.com/ory/client-go@v1.22.9",
      "type": "library",
      "name": "pkg:golang/github.com/ory/client-go@v1.22.9",
      "version": "v1.22.9",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/ory/client-go@v1.22.9"
    },
    {
      "bom-ref": "pkg:golang/github.com/pandatix/go-cvss@v0.6.2",
      "type": "library",
      "name": "pkg:golang/github.com/pandatix/go-cvss@v0.6.2",
      "version": "v0.6.2",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/pandatix/go-cvss@v0.6.2"
    },
    {
      "bom-ref": "pkg:golang/github.com/protonmail/gopenpgp/v3@v3.4.0",
      "type": "library",
      "name": "pkg:golang/github.com/protonmail/gopenpgp/v3@v3.4.0",
      "version": "v3.4.0",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/github.com/protonmail/gopenpgp/v3@v3.4.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/rivo/uniseg@v0.4.7",
      "type": "library",
      "name": "pkg:golang/github.com/rivo/uniseg@v0.4.7",
      "version": "v0.4.7",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/rivo/uniseg@v0.4.7"
    },
    {
      "bom-ref": "pkg:golang/github.com/schollz/progressbar/v3@v3.19.0",
      "type": "library",
      "name": "pkg:golang/github.com/schollz/progressbar/v3@v3.19.0",
      "version": "v3.19.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/github.com/schollz/progressbar/v3@v3.19.0"
    },
    {
      "bom-ref": "pkg:golang/github.com/ulikunitz/xz@v0.5.15",
      "type": "library",
      "name": "pkg:golang/github.com/ulikunitz/xz@v0.5.15",
      "version": "v0.5.15",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:golang/github.com/ulikunitz/xz@v0.5.15"
    },
    {
      "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb",
      "type": "library",
      "name": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb",
      "version": "v0.0.0-20190905194746-02993c407bfb",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb"
    },
    {
      "bom-ref": "pkg:golang/github.com/yaronf/httpsign@v0.5.1",
      "type": "library",
      "name": "pkg:golang/github.com/yaronf/httpsign@v0.5.1",
      "version": "v0.5.1",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/github.com/yaronf/httpsign@v0.5.1"
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho@v0.68.0",
      "type": "library",
      "name": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho@v0.68.0",
      "version": "v0.68.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho@v0.68.0"
    },
    {
      "bom-ref": "pkg:golang/go.opentelemetry.io/otel/exporters/stdout/stdouttrace@v1.43.0",
      "type": "library",
      "name": "pkg:golang/go.opentelemetry.io/otel/exporters/stdout/stdouttrace@v1.43.0",
      "version": "v1.43.0",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/stdout/stdouttrace@v1.43.0"
    },
    {
      "bom-ref": "pkg:golang/go.uber.org/dig@v1.19.0",
      "type": "library",
      "name": "pkg:golang/go.uber.org/dig@v1.19.0",
      "version": "v1.19.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/go.uber.org/dig@v1.19.0"
    },
    {
      "bom-ref": "pkg:golang/go.uber.org/fx@v1.24.0",
      "type": "library",
      "name": "pkg:golang/go.uber.org/fx@v1.24.0",
      "version": "v1.24.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/go.uber.org/fx@v1.24.0"
    },
    {
      "bom-ref": "pkg:golang/gorm.io/datatypes@v1.2.7",
      "type": "library",
      "name": "pkg:golang/gorm.io/datatypes@v1.2.7",
      "version": "v1.2.7",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/gorm.io/datatypes@v1.2.7"
    },
    {
      "bom-ref": "pkg:golang/gorm.io/driver/clickhouse@v0.7.0",
      "type": "library",
      "name": "pkg:golang/gorm.io/driver/clickhouse@v0.7.0",
      "version": "v0.7.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/gorm.io/driver/clickhouse@v0.7.0"
    },
    {
      "bom-ref": "pkg:golang/gorm.io/plugin/opentelemetry@v0.1.16",
      "type": "library",
      "name": "pkg:golang/gorm.io/plugin/opentelemetry@v0.1.16",
      "version": "v0.1.16",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/gorm.io/plugin/opentelemetry@v0.1.16"
    },
    {
      "bom-ref": "pkg:golang/pault.ag/go/debian@v0.19.0",
      "type": "library",
      "name": "pkg:golang/pault.ag/go/debian@v0.19.0",
      "version": "v0.19.0",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/pault.ag/go/debian@v0.19.0"
    },
    {
      "bom-ref": "pkg:golang/pault.ag/go/topsort@v0.1.1",
      "type": "library",
      "name": "pkg:golang/pault.ag/go/topsort@v0.1.1",
      "version": "v0.1.1",
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:golang/pault.ag/go/topsort@v0.1.1"
    },
    {
      "bom-ref": "pkg:golang/stdlib@v1.26.1",
      "type": "library",
      "name": "pkg:golang/stdlib@v1.26.1",
      "version": "v1.26.1",
      "licenses": [
        {
          "license": {
            "name": "unknown"
          }
        }
      ],
      "purl": "pkg:golang/stdlib@v1.26.1"
    },
    {
      "bom-ref": "pkg:oci/devguard@main?arch=amd64&repository_url=ghcr.io%2Fl3montree-dev%2Fdevguard&tag=main-amd64",
      "type": "application",
      "name": "pkg:oci/devguard@main?arch=amd64&repository_url=ghcr.io%2Fl3montree-dev%2Fdevguard&tag=main-amd64",
      "purl": "pkg:oci/devguard@main?arch=amd64&repository_url=ghcr.io%2Fl3montree-dev%2Fdevguard&tag=main-amd64"
    }
  ],
  "externalReferences": [
    {
      "url": "https://api.main.devguard.org/api/v1/public/e1f24270-6e68-4571-9168-9c151c639c97/refs/main/artifacts/pkg%3Aoci%2Fdevguard%3Frepository_url%3Dghcr.io%2Fl3montree-dev%2Fdevguard%26arch%3Damd64%26tag%3Dmain-amd64/vex.json/",
      "comment": "Up to date Vulnerability exploitability information.",
      "type": "exploitability-statement"
    },
    {
      "url": "https://api.main.devguard.org/api/v1/public/e1f24270-6e68-4571-9168-9c151c639c97/refs/main/artifacts/pkg%3Aoci%2Fdevguard%3Frepository_url%3Dghcr.io%2Fl3montree-dev%2Fdevguard%26arch%3Damd64%26tag%3Dmain-amd64/sbom.json/",
      "comment": "Software bill of materials.",
      "type": "bom"
    },
    {
      "url": "https://main.devguard.org/l3montree-cybersecurity/projects/devguard/assets/devguard/refs/main?artifact=pkg%3Aoci%2Fdevguard%3Frepository_url%3Dghcr.io%2Fl3montree-dev%2Fdevguard%26arch%3Damd64%26tag%3Dmain-amd64",
      "comment": "Dynamic analysis report",
      "type": "dynamic-analysis-report"
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:golang/dario.cat/mergo@v1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/filippo.io/edwards25519@v1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/agnivade/levenshtein@v1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/andybalholm/brotli@v1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/bmatcuk/doublestar/v4@v4.10.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/bradleyfalzon/ghinstallation/v2@v2.18.0",
      "dependsOn": [
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/github.com/google/go-github/v84@v84.0.0",
        "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2"
      ]
    },
    {
      "ref": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/google/go-cmp@v0.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/google/go-github/v84@v84.0.0",
      "dependsOn": [
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/github.com/google/go-querystring@v1.2.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/google/go-querystring@v1.2.0",
      "dependsOn": [
        "pkg:golang/github.com/google/go-cmp@v0.7.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/casbin/casbin/v2@v2.135.0",
      "dependsOn": [
        "pkg:golang/github.com/bmatcuk/doublestar/v4@v4.10.0",
        "pkg:golang/github.com/casbin/govaluate@v1.10.0",
        "pkg:golang/github.com/google/uuid@v1.6.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/casbin/govaluate@v1.10.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/google/uuid@v1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/casbin/casbin/v3@v3.10.0",
      "dependsOn": [
        "pkg:golang/github.com/bmatcuk/doublestar/v4@v4.10.0",
        "pkg:golang/github.com/casbin/govaluate@v1.10.0",
        "pkg:golang/github.com/google/uuid@v1.6.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/casbin/gorm-adapter/v3@v3.41.0",
      "dependsOn": [
        "pkg:golang/github.com/lib/pq@v1.12.3",
        "pkg:golang/gorm.io/driver/mysql@v1.6.0",
        "pkg:golang/github.com/glebarez/sqlite@v1.11.0",
        "pkg:golang/github.com/go-sql-driver/mysql@v1.9.3",
        "pkg:golang/github.com/pkg/errors@v0.9.1",
        "pkg:golang/golang.org/x/sync@v0.20.0",
        "pkg:golang/gorm.io/plugin/dbresolver@v1.6.2",
        "pkg:golang/gorm.io/driver/postgres@v1.6.0",
        "pkg:golang/gorm.io/driver/sqlserver@v1.6.3",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/gorm.io/gorm@v1.31.1",
        "pkg:golang/github.com/casbin/casbin/v3@v3.10.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/glebarez/sqlite@v1.11.0",
      "dependsOn": [
        "pkg:golang/github.com/glebarez/go-sqlite@v1.22.0",
        "pkg:golang/gorm.io/gorm@v1.31.1",
        "pkg:golang/modernc.org/sqlite@v1.48.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/glebarez/go-sqlite@v1.22.0",
      "dependsOn": [
        "pkg:golang/modernc.org/sqlite@v1.48.1",
        "pkg:golang/golang.org/x/sys@v0.42.0",
        "pkg:golang/modernc.org/libc@v1.70.0",
        "pkg:golang/modernc.org/mathutil@v1.7.1"
      ]
    },
    {
      "ref": "pkg:golang/golang.org/x/sys@v0.42.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/modernc.org/libc@v1.70.0",
      "dependsOn": [
        "pkg:golang/github.com/mattn/go-isatty@v0.0.20",
        "pkg:golang/github.com/google/uuid@v1.6.0",
        "pkg:golang/golang.org/x/sys@v0.42.0",
        "pkg:golang/modernc.org/fileutil@v1.4.0",
        "pkg:golang/golang.org/x/tools@v0.43.0",
        "pkg:golang/modernc.org/memory@v1.11.0",
        "pkg:golang/github.com/dustin/go-humanize@v1.0.1",
        "pkg:golang/github.com/ncruces/go-strftime@v1.0.0",
        "pkg:golang/modernc.org/mathutil@v1.7.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/dustin/go-humanize@v1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.20",
      "dependsOn": [
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/ncruces/go-strftime@v1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/golang.org/x/tools@v0.43.0",
      "dependsOn": [
        "pkg:golang/golang.org/x/mod@v0.34.0",
        "pkg:golang/golang.org/x/net@v0.52.0",
        "pkg:golang/golang.org/x/sync@v0.20.0",
        "pkg:golang/golang.org/x/telemetry@v0.0.0-20260311193753-579e4da9a98c",
        "pkg:golang/github.com/google/go-cmp@v0.7.0"
      ]
    },
    {
      "ref": "pkg:golang/golang.org/x/mod@v0.34.0",
      "dependsOn": [
        "pkg:golang/golang.org/x/tools@v0.43.0"
      ]
    },
    {
      "ref": "pkg:golang/golang.org/x/net@v0.52.0",
      "dependsOn": [
        "pkg:golang/golang.org/x/term@v0.41.0",
        "pkg:golang/golang.org/x/text@v0.35.0",
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/golang.org/x/crypto@v0.49.0",
      "dependsOn": [
        "pkg:golang/golang.org/x/term@v0.41.0",
        "pkg:golang/golang.org/x/net@v0.52.0",
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/golang.org/x/term@v0.41.0",
      "dependsOn": [
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/golang.org/x/text@v0.35.0",
      "dependsOn": [
        "pkg:golang/golang.org/x/tools@v0.43.0"
      ]
    },
    {
      "ref": "pkg:golang/golang.org/x/sync@v0.20.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/golang.org/x/telemetry@v0.0.0-20260311193753-579e4da9a98c",
      "dependsOn": [
        "pkg:golang/golang.org/x/mod@v0.34.0",
        "pkg:golang/golang.org/x/sync@v0.20.0",
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/modernc.org/fileutil@v1.4.0",
      "dependsOn": [
        "pkg:golang/modernc.org/mathutil@v1.7.1"
      ]
    },
    {
      "ref": "pkg:golang/modernc.org/mathutil@v1.7.1",
      "dependsOn": [
        "pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec"
      ]
    },
    {
      "ref": "pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/modernc.org/memory@v1.11.0",
      "dependsOn": [
        "pkg:golang/modernc.org/mathutil@v1.7.1",
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/modernc.org/sqlite@v1.48.1",
      "dependsOn": [
        "pkg:golang/golang.org/x/sys@v0.42.0",
        "pkg:golang/modernc.org/fileutil@v1.4.0",
        "pkg:golang/modernc.org/libc@v1.70.0",
        "pkg:golang/modernc.org/mathutil@v1.7.1"
      ]
    },
    {
      "ref": "pkg:golang/gorm.io/gorm@v1.31.1",
      "dependsOn": [
        "pkg:golang/github.com/jinzhu/inflection@v1.0.0",
        "pkg:golang/github.com/jinzhu/now@v1.1.5",
        "pkg:golang/golang.org/x/text@v0.35.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/jinzhu/inflection@v1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/jinzhu/now@v1.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/go-sql-driver/mysql@v1.9.3",
      "dependsOn": [
        "pkg:golang/filippo.io/edwards25519@v1.2.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/lib/pq@v1.12.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/pkg/errors@v0.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/stretchr/testify@v1.11.1",
      "dependsOn": [
        "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc",
        "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2",
        "pkg:golang/github.com/stretchr/objx@v0.5.3",
        "pkg:golang/gopkg.in/yaml.v3@v3.0.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/stretchr/objx@v0.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/gorm.io/driver/mysql@v1.6.0",
      "dependsOn": [
        "pkg:golang/gorm.io/gorm@v1.31.1",
        "pkg:golang/github.com/go-sql-driver/mysql@v1.9.3"
      ]
    },
    {
      "ref": "pkg:golang/gorm.io/driver/postgres@v1.6.0",
      "dependsOn": [
        "pkg:golang/github.com/jackc/pgx/v5@v5.9.1",
        "pkg:golang/gorm.io/gorm@v1.31.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/jackc/pgx/v5@v5.9.1",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/golang.org/x/sync@v0.20.0",
        "pkg:golang/golang.org/x/text@v0.35.0",
        "pkg:golang/github.com/jackc/pgpassfile@v1.0.0",
        "pkg:golang/github.com/jackc/pgservicefile@v0.0.0-20240606120523-5a60cdf6a761",
        "pkg:golang/github.com/jackc/puddle/v2@v2.2.2"
      ]
    },
    {
      "ref": "pkg:golang/github.com/jackc/pgpassfile@v1.0.0",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/jackc/pgservicefile@v0.0.0-20240606120523-5a60cdf6a761",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/jackc/puddle/v2@v2.2.2",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/golang.org/x/sync@v0.20.0"
      ]
    },
    {
      "ref": "pkg:golang/gorm.io/driver/sqlserver@v1.6.3",
      "dependsOn": [
        "pkg:golang/gorm.io/gorm@v1.31.1",
        "pkg:golang/github.com/microsoft/go-mssqldb@v1.9.8"
      ]
    },
    {
      "ref": "pkg:golang/github.com/microsoft/go-mssqldb@v1.9.8",
      "dependsOn": [
        "pkg:golang/golang.org/x/text@v0.35.0",
        "pkg:golang/github.com/golang-sql/civil@v0.0.0-20220223132316-b832511892a9",
        "pkg:golang/github.com/golang-sql/sqlexp@v0.1.0",
        "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.21.0",
        "pkg:golang/github.com/google/uuid@v1.6.0",
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/github.com/shopspring/decimal@v1.4.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.21.0",
      "dependsOn": [
        "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.12.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/golang.org/x/net@v0.52.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.12.0",
      "dependsOn": [
        "pkg:golang/golang.org/x/net@v0.52.0",
        "pkg:golang/golang.org/x/text@v0.35.0",
        "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.21.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/golang-sql/civil@v0.0.0-20220223132316-b832511892a9",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/golang-sql/sqlexp@v0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/shopspring/decimal@v1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/gorm.io/plugin/dbresolver@v1.6.2",
      "dependsOn": [
        "pkg:golang/gorm.io/driver/mysql@v1.6.0",
        "pkg:golang/gorm.io/gorm@v1.31.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/clickhouse/ch-go@v0.71.0",
      "dependsOn": [
        "pkg:golang/github.com/segmentio/asm@v1.2.1",
        "pkg:golang/go.uber.org/zap@v1.27.1",
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/github.com/jackc/puddle/v2@v2.2.2",
        "pkg:golang/github.com/hashicorp/go-version@v1.9.0",
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
        "pkg:golang/github.com/google/uuid@v1.6.0",
        "pkg:golang/go.uber.org/multierr@v1.11.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/go.opentelemetry.io/otel/metric@v1.43.0",
        "pkg:golang/github.com/go-faster/city@v1.0.1",
        "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0",
        "pkg:golang/github.com/go-faster/errors@v0.7.1",
        "pkg:golang/golang.org/x/sync@v0.20.0",
        "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0",
        "pkg:golang/github.com/klauspost/compress@v1.18.5",
        "pkg:golang/github.com/pierrec/lz4/v4@v4.1.26",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
        "pkg:golang/github.com/dustin/go-humanize@v1.0.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/go-faster/city@v1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/go-faster/errors@v0.7.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/hashicorp/go-version@v1.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/klauspost/compress@v1.18.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/pierrec/lz4/v4@v4.1.26",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/segmentio/asm@v1.2.1",
      "dependsOn": [
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/go.opentelemetry.io/otel/metric@v1.43.0",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0"
      ]
    },
    {
      "ref": "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
      "dependsOn": [
        "pkg:golang/github.com/go-logr/stdr@v1.2.2",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1",
        "pkg:golang/go.opentelemetry.io/otel/metric@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
        "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0",
        "pkg:golang/github.com/go-logr/logr@v1.4.3"
      ]
    },
    {
      "ref": "pkg:golang/github.com/go-logr/logr@v1.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/go-logr/stdr@v1.2.2",
      "dependsOn": [
        "pkg:golang/github.com/go-logr/logr@v1.4.3"
      ]
    },
    {
      "ref": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1",
      "dependsOn": [
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
      "dependsOn": [
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0"
      ]
    },
    {
      "ref": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0",
      "dependsOn": [
        "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.43.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
        "pkg:golang/golang.org/x/sys@v0.42.0",
        "pkg:golang/github.com/go-logr/logr@v1.4.3",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/go.opentelemetry.io/otel/metric@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
        "pkg:golang/github.com/google/uuid@v1.6.0"
      ]
    },
    {
      "ref": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.43.0",
      "dependsOn": [
        "pkg:golang/github.com/go-logr/logr@v1.4.3",
        "pkg:golang/github.com/go-logr/stdr@v1.2.2",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/go.opentelemetry.io/otel/metric@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0"
      ]
    },
    {
      "ref": "pkg:golang/go.uber.org/multierr@v1.11.0",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/go.uber.org/zap@v1.27.1",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/go.uber.org/multierr@v1.11.0",
        "pkg:golang/gopkg.in/yaml.v3@v3.0.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/clickhouse/clickhouse-go/v2@v2.44.0",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/docker/docker@v28.5.2+incompatible",
        "pkg:golang/github.com/shopspring/decimal@v1.4.0",
        "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
        "pkg:golang/github.com/google/uuid@v1.6.0",
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
        "pkg:golang/github.com/andybalholm/brotli@v1.2.1",
        "pkg:golang/github.com/paulmach/orb@v0.13.0",
        "pkg:golang/github.com/docker/go-units@v0.5.0",
        "pkg:golang/golang.org/x/net@v0.52.0",
        "pkg:golang/github.com/clickhouse/ch-go@v0.71.0",
        "pkg:golang/github.com/testcontainers/testcontainers-go@v0.41.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/docker/docker@v28.5.2+incompatible",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/docker/go-units@v0.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/paulmach/orb@v0.13.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/testcontainers/testcontainers-go@v0.41.0",
      "dependsOn": [
        "pkg:golang/github.com/moby/patternmatcher@v0.6.1",
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
        "pkg:golang/github.com/google/uuid@v1.6.0",
        "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0",
        "pkg:golang/golang.org/x/sys@v0.42.0",
        "pkg:golang/github.com/containerd/errdefs@v1.0.0",
        "pkg:golang/github.com/moby/go-archive@v0.2.0",
        "pkg:golang/github.com/cpuguy83/dockercfg@v0.3.2",
        "pkg:golang/dario.cat/mergo@v1.0.2",
        "pkg:golang/github.com/magiconair/properties@v1.8.10",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/shirou/gopsutil/v4@v4.26.3",
        "pkg:golang/github.com/docker/docker@v28.5.2+incompatible",
        "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.4",
        "pkg:golang/github.com/moby/term@v0.5.2",
        "pkg:golang/github.com/docker/go-connections@v0.6.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/containerd/errdefs@v1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.4",
      "dependsOn": [
        "pkg:golang/github.com/containerd/log@v0.1.0",
        "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/containerd/log@v0.1.0",
      "dependsOn": [
        "pkg:golang/github.com/sirupsen/logrus@v1.9.4"
      ]
    },
    {
      "ref": "pkg:golang/github.com/sirupsen/logrus@v1.9.4",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
      "dependsOn": [
        "pkg:golang/github.com/opencontainers/go-digest@v1.0.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/cpuguy83/dockercfg@v0.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/docker/go-connections@v0.6.0",
      "dependsOn": [
        "pkg:golang/github.com/microsoft/go-winio@v0.6.2"
      ]
    },
    {
      "ref": "pkg:golang/github.com/microsoft/go-winio@v0.6.2",
      "dependsOn": [
        "pkg:golang/golang.org/x/tools@v0.43.0",
        "pkg:golang/github.com/sirupsen/logrus@v1.9.4",
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/magiconair/properties@v1.8.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/moby/go-archive@v0.2.0",
      "dependsOn": [
        "pkg:golang/github.com/klauspost/compress@v1.18.5",
        "pkg:golang/github.com/moby/patternmatcher@v0.6.1",
        "pkg:golang/github.com/moby/sys/sequential@v0.6.0",
        "pkg:golang/github.com/moby/sys/user@v0.4.0",
        "pkg:golang/github.com/moby/sys/userns@v0.1.0",
        "pkg:golang/golang.org/x/sys@v0.42.0",
        "pkg:golang/github.com/containerd/log@v0.1.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/moby/patternmatcher@v0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/moby/sys/sequential@v0.6.0",
      "dependsOn": [
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/moby/sys/user@v0.4.0",
      "dependsOn": [
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/moby/sys/userns@v0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/moby/term@v0.5.2",
      "dependsOn": [
        "pkg:golang/github.com/azure/go-ansiterm@v0.0.0-20250102033503-faa5f7b0171c",
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/azure/go-ansiterm@v0.0.0-20250102033503-faa5f7b0171c",
      "dependsOn": [
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/shirou/gopsutil/v4@v4.26.3",
      "dependsOn": [
        "pkg:golang/github.com/yusufpapurcu/wmi@v1.2.4",
        "pkg:golang/golang.org/x/sys@v0.42.0",
        "pkg:golang/github.com/ebitengine/purego@v0.10.0",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/github.com/lufia/plan9stats@v0.0.0-20260330125221-c963978e514e",
        "pkg:golang/github.com/power-devops/perfstat@v0.0.0-20240221224432-82ca36839d55",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/tklauser/go-sysconf@v0.3.16"
      ]
    },
    {
      "ref": "pkg:golang/github.com/ebitengine/purego@v0.10.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/lufia/plan9stats@v0.0.0-20260330125221-c963978e514e",
      "dependsOn": [
        "pkg:golang/github.com/google/go-cmp@v0.7.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/power-devops/perfstat@v0.0.0-20240221224432-82ca36839d55",
      "dependsOn": [
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/tklauser/go-sysconf@v0.3.16",
      "dependsOn": [
        "pkg:golang/github.com/tklauser/numcpus@v0.11.0",
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/tklauser/numcpus@v0.11.0",
      "dependsOn": [
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/yusufpapurcu/wmi@v1.2.4",
      "dependsOn": [
        "pkg:golang/github.com/go-ole/go-ole@v1.3.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/go-ole/go-ole@v1.3.0",
      "dependsOn": [
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/cloudflare/circl@v1.6.3",
      "dependsOn": [
        "pkg:golang/golang.org/x/sys@v0.42.0",
        "pkg:golang/golang.org/x/crypto@v0.49.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/cyclonedx/cyclonedx-go@v0.10.0",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.6.1",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/dunglas/httpsfv@v1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/emirpasic/gods@v1.18.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/exaring/otelpgx@v0.10.0",
      "dependsOn": [
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
        "pkg:golang/github.com/jackc/pgx/v5@v5.9.1",
        "pkg:golang/go.opentelemetry.io/otel/metric@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.13",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/getsentry/sentry-go@v0.44.1",
      "dependsOn": [
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/github.com/pkg/errors@v0.9.1",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/golang.org/x/sys@v0.42.0",
        "pkg:golang/golang.org/x/text@v0.35.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376",
      "dependsOn": [
        "pkg:golang/github.com/pkg/errors@v0.9.1",
        "pkg:golang/gopkg.in/warnings.v0@v0.1.2"
      ]
    },
    {
      "ref": "pkg:golang/gopkg.in/warnings.v0@v0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/go-git/go-billy/v5@v5.8.0",
      "dependsOn": [
        "pkg:golang/github.com/cyphar/filepath-securejoin@v0.6.1",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/go-git/go-git/v5@v5.17.2",
      "dependsOn": [
        "pkg:golang/github.com/kevinburke/ssh_config@v1.6.0",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/github.com/go-git/go-billy/v5@v5.8.0",
        "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8",
        "pkg:golang/dario.cat/mergo@v1.0.2",
        "pkg:golang/github.com/emirpasic/gods@v1.18.1",
        "pkg:golang/github.com/pjbgf/sha1cd@v0.5.0",
        "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/sergi/go-diff@v1.4.0",
        "pkg:golang/golang.org/x/net@v0.52.0",
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/golang.org/x/sys@v0.42.0",
        "pkg:golang/github.com/protonmail/go-crypto@v1.4.1",
        "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376",
        "pkg:golang/golang.org/x/text@v0.35.0",
        "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99",
        "pkg:golang/github.com/skeema/knownhosts@v1.3.2"
      ]
    },
    {
      "ref": "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/kevinburke/ssh_config@v1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/pjbgf/sha1cd@v0.5.0",
      "dependsOn": [
        "pkg:golang/github.com/klauspost/cpuid/v2@v2.3.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/klauspost/cpuid/v2@v2.3.0",
      "dependsOn": [
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/protonmail/go-crypto@v1.4.1",
      "dependsOn": [
        "pkg:golang/github.com/cloudflare/circl@v1.6.3",
        "pkg:golang/golang.org/x/crypto@v0.49.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/sergi/go-diff@v1.4.0",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/skeema/knownhosts@v1.3.2",
      "dependsOn": [
        "pkg:golang/golang.org/x/crypto@v0.49.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3",
      "dependsOn": [
        "pkg:golang/golang.org/x/sys@v0.42.0",
        "pkg:golang/github.com/microsoft/go-winio@v0.6.2",
        "pkg:golang/golang.org/x/crypto@v0.49.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/go-playground/locales@v0.14.1",
      "dependsOn": [
        "pkg:golang/golang.org/x/text@v0.35.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/go-playground/universal-translator@v0.18.1",
      "dependsOn": [
        "pkg:golang/github.com/go-playground/locales@v0.14.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/go-playground/validator/v10@v10.30.2",
      "dependsOn": [
        "pkg:golang/github.com/leodido/go-urn@v1.4.0",
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/golang.org/x/text@v0.35.0",
        "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.13",
        "pkg:golang/github.com/go-playground/locales@v0.14.1",
        "pkg:golang/github.com/go-playground/universal-translator@v0.18.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/leodido/go-urn@v1.4.0",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/gobwas/glob@v0.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/gocsaf/csaf/v3@v3.5.1",
      "dependsOn": [
        "pkg:golang/golang.org/x/time@v0.15.0",
        "pkg:golang/github.com/intevation/gval@v1.3.0",
        "pkg:golang/github.com/intevation/jsonpath@v0.2.1",
        "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0",
        "pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.2",
        "pkg:golang/github.com/protonmail/gopenpgp/v2@v2.10.0",
        "pkg:golang/golang.org/x/term@v0.41.0",
        "pkg:golang/go.etcd.io/bbolt@v1.4.3",
        "pkg:golang/golang.org/x/crypto@v0.49.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/intevation/gval@v1.3.0",
      "dependsOn": [
        "pkg:golang/github.com/shopspring/decimal@v1.4.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/intevation/jsonpath@v0.2.1",
      "dependsOn": [
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/github.com/intevation/gval@v1.3.0",
        "pkg:golang/gopkg.in/yaml.v3@v3.0.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/protonmail/gopenpgp/v2@v2.10.0",
      "dependsOn": [
        "pkg:golang/github.com/pkg/errors@v0.9.1",
        "pkg:golang/github.com/protonmail/go-crypto@v1.4.1",
        "pkg:golang/github.com/protonmail/go-mime@v0.0.0-20230322103455-7d82a3887f2f",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/golang.org/x/crypto@v0.49.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/protonmail/go-mime@v0.0.0-20230322103455-7d82a3887f2f",
      "dependsOn": [
        "pkg:golang/golang.org/x/text@v0.35.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.2",
      "dependsOn": [
        "pkg:golang/golang.org/x/text@v0.35.0"
      ]
    },
    {
      "ref": "pkg:golang/go.etcd.io/bbolt@v1.4.3",
      "dependsOn": [
        "pkg:golang/golang.org/x/sync@v0.20.0",
        "pkg:golang/golang.org/x/sys@v0.42.0",
        "pkg:golang/github.com/spf13/cobra@v1.10.2",
        "pkg:golang/github.com/spf13/pflag@v1.0.10",
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/spf13/cobra@v1.10.2",
      "dependsOn": [
        "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
        "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.7",
        "pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0",
        "pkg:golang/github.com/spf13/pflag@v1.0.10"
      ]
    },
    {
      "ref": "pkg:golang/github.com/cpuguy83/go-md2man/v2@v2.0.7",
      "dependsOn": [
        "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/russross/blackfriday/v2@v2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/spf13/pflag@v1.0.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/golang.org/x/time@v0.15.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/golang-migrate/migrate/v4@v4.19.1",
      "dependsOn": [
        "pkg:golang/github.com/lib/pq@v1.12.3",
        "pkg:golang/github.com/clickhouse/clickhouse-go@v1.5.4",
        "pkg:golang/github.com/gocql/gocql@v0.0.0-20210515062232-b7ef815b4556",
        "pkg:golang/github.com/nakagami/firebirdsql@v0.0.0-20190310045651-3c02a58cfed8",
        "pkg:golang/github.com/azure/go-autorest/autorest/adal@v0.9.24",
        "pkg:golang/github.com/mutecomm/go-sqlcipher/v4@v4.4.0",
        "pkg:golang/google.golang.org/api@v0.275.0",
        "pkg:golang/github.com/snowflakedb/gosnowflake@v1.6.19",
        "pkg:golang/golang.org/x/tools/godoc@v0.1.0-deprecated",
        "pkg:golang/github.com/jackc/pgerrcode@v0.0.0-20240316143900-6e2875d9b438",
        "pkg:golang/github.com/jackc/pgconn@v1.14.3",
        "pkg:golang/github.com/cockroachdb/cockroach-go/v2@v2.1.1",
        "pkg:golang/cloud.google.com/go/storage@v1.59.2",
        "pkg:golang/github.com/jackc/pgx/v4@v4.18.2",
        "pkg:golang/github.com/aws/aws-sdk-go@v1.55.8",
        "pkg:golang/github.com/microsoft/go-mssqldb@v1.9.8",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/ktrysmt/go-bitbucket@v0.6.4",
        "pkg:golang/github.com/xanzy/go-gitlab@v0.15.0",
        "pkg:golang/modernc.org/ql@v1.0.0",
        "pkg:golang/github.com/rqlite/gorqlite@v0.0.0-20230708021416-2acd02b70b79",
        "pkg:golang/github.com/go-sql-driver/mysql@v1.9.3",
        "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0",
        "pkg:golang/github.com/mattn/go-sqlite3@v1.14.28",
        "pkg:golang/modernc.org/sqlite@v1.48.1",
        "pkg:golang/github.com/jackc/pgx/v5@v5.9.1",
        "pkg:golang/cloud.google.com/go/spanner@v1.89.0",
        "pkg:golang/github.com/neo4j/neo4j-go-driver@v1.8.1-0.20200803113522-b626aa943eba",
        "pkg:golang/github.com/docker/docker@v28.5.2+incompatible",
        "pkg:golang/github.com/google/go-github/v39@v39.2.0",
        "pkg:golang/go.mongodb.org/mongo-driver@v1.17.9",
        "pkg:golang/golang.org/x/oauth2@v0.36.0"
      ]
    },
    {
      "ref": "pkg:golang/cloud.google.com/go/spanner@v1.89.0",
      "dependsOn": [
        "pkg:golang/github.com/googleapis/gax-go/v2@v2.21.0",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/golang.org/x/sync@v0.20.0",
        "pkg:golang/google.golang.org/api@v0.275.0",
        "pkg:golang/google.golang.org/genproto@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
        "pkg:golang/cloud.google.com/go/iam@v1.7.0",
        "pkg:golang/github.com/google/uuid@v1.6.0",
        "pkg:golang/cloud.google.com/go/monitoring@v1.25.0",
        "pkg:golang/golang.org/x/oauth2@v0.36.0",
        "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/go.opentelemetry.io/otel/metric@v1.43.0",
        "pkg:golang/github.com/googlecloudplatform/grpc-gcp-go/grpcgcp@v1.6.0",
        "pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.40.0",
        "pkg:golang/go.opencensus.io@v0.24.0",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0",
        "pkg:golang/cloud.google.com/go/longrunning@v0.9.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
        "pkg:golang/cloud.google.com/go@v0.123.0"
      ]
    },
    {
      "ref": "pkg:golang/cloud.google.com/go/iam@v1.7.0",
      "dependsOn": [
        "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/google.golang.org/genproto@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/cloud.google.com/go/longrunning@v0.9.0",
        "pkg:golang/cloud.google.com/go@v0.123.0",
        "pkg:golang/github.com/googleapis/gax-go/v2@v2.21.0",
        "pkg:golang/google.golang.org/api@v0.275.0"
      ]
    },
    {
      "ref": "pkg:golang/cloud.google.com/go/longrunning@v0.9.0",
      "dependsOn": [
        "pkg:golang/google.golang.org/genproto@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/cloud.google.com/go@v0.123.0",
        "pkg:golang/github.com/googleapis/gax-go/v2@v2.21.0",
        "pkg:golang/google.golang.org/api@v0.275.0",
        "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260406210006-6f92a3bedf2d"
      ]
    },
    {
      "ref": "pkg:golang/cloud.google.com/go@v0.123.0",
      "dependsOn": [
        "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
        "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/golang.org/x/oauth2@v0.36.0",
        "pkg:golang/google.golang.org/api@v0.275.0",
        "pkg:golang/github.com/googleapis/gax-go/v2@v2.21.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/cloud.google.com/go/storage@v1.59.2",
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/github.com/google/go-cmp@v0.7.0"
      ]
    },
    {
      "ref": "pkg:golang/cloud.google.com/go/storage@v1.59.2",
      "dependsOn": [
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/google.golang.org/api@v0.275.0",
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
        "pkg:golang/cloud.google.com/go/iam@v1.7.0",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/google.golang.org/genproto@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/github.com/google/uuid@v1.6.0",
        "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.43.0",
        "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/exporter/metric@v0.55.0",
        "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0",
        "pkg:golang/golang.org/x/oauth2@v0.36.0",
        "pkg:golang/github.com/googleapis/gax-go/v2@v2.21.0",
        "pkg:golang/golang.org/x/sync@v0.20.0",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/cloud.google.com/go/auth@v0.20.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0",
        "pkg:golang/cloud.google.com/go/longrunning@v0.9.0",
        "pkg:golang/cloud.google.com/go@v0.123.0",
        "pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.40.0"
      ]
    },
    {
      "ref": "pkg:golang/cloud.google.com/go/auth@v0.20.0",
      "dependsOn": [
        "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/google.golang.org/api@v0.275.0",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
        "pkg:golang/github.com/google/s2a-go@v0.1.9",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0",
        "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.68.0",
        "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.68.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/golang.org/x/net@v0.52.0",
        "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.14",
        "pkg:golang/golang.org/x/time@v0.15.0",
        "pkg:golang/github.com/googleapis/gax-go/v2@v2.21.0"
      ]
    },
    {
      "ref": "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0",
      "dependsOn": [
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/google/s2a-go@v0.1.9",
      "dependsOn": [
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/golang.org/x/sync@v0.20.0",
        "pkg:golang/google.golang.org/api@v0.275.0",
        "pkg:golang/google.golang.org/grpc@v1.80.0"
      ]
    },
    {
      "ref": "pkg:golang/google.golang.org/api@v0.275.0",
      "dependsOn": [
        "pkg:golang/golang.org/x/oauth2@v0.36.0",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.14",
        "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8",
        "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.68.0",
        "pkg:golang/golang.org/x/time@v0.15.0",
        "pkg:golang/github.com/google/s2a-go@v0.1.9",
        "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.68.0",
        "pkg:golang/golang.org/x/net@v0.52.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/cloud.google.com/go/auth@v0.20.0",
        "pkg:golang/golang.org/x/sync@v0.20.0",
        "pkg:golang/github.com/google/uuid@v1.6.0",
        "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0",
        "pkg:golang/github.com/googleapis/gax-go/v2@v2.21.0"
      ]
    },
    {
      "ref": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8",
      "dependsOn": [
        "pkg:golang/cloud.google.com/go/auth@v0.20.0",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/golang.org/x/oauth2@v0.36.0"
      ]
    },
    {
      "ref": "pkg:golang/golang.org/x/oauth2@v0.36.0",
      "dependsOn": [
        "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.14",
      "dependsOn": [
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/googleapis/gax-go/v2@v2.21.0",
      "dependsOn": [
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/go.opentelemetry.io/otel/metric@v1.43.0",
        "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
        "pkg:golang/google.golang.org/genproto@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/google.golang.org/api@v0.275.0"
      ]
    },
    {
      "ref": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260406210006-6f92a3bedf2d",
      "dependsOn": [
        "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11"
      ]
    },
    {
      "ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260406210006-6f92a3bedf2d",
      "dependsOn": [
        "pkg:golang/google.golang.org/protobuf@v1.36.11"
      ]
    },
    {
      "ref": "pkg:golang/google.golang.org/protobuf@v1.36.11",
      "dependsOn": [
        "pkg:golang/github.com/google/go-cmp@v0.7.0"
      ]
    },
    {
      "ref": "pkg:golang/google.golang.org/grpc@v1.80.0",
      "dependsOn": [
        "pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.40.0",
        "pkg:golang/golang.org/x/sys@v0.42.0",
        "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.6.0",
        "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.36.0",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/metric@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
        "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0",
        "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/github.com/google/uuid@v1.6.0",
        "pkg:golang/golang.org/x/oauth2@v0.36.0",
        "pkg:golang/golang.org/x/net@v0.52.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0",
        "pkg:golang/golang.org/x/sync@v0.20.0",
        "pkg:golang/github.com/cncf/xds/go@v0.0.0-20251210132809-ee656c7534f5"
      ]
    },
    {
      "ref": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20251210132809-ee656c7534f5",
      "dependsOn": [
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/cel.dev/expr@v0.25.1",
        "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.0",
        "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/google.golang.org/grpc@v1.80.0"
      ]
    },
    {
      "ref": "pkg:golang/cel.dev/expr@v0.25.1",
      "dependsOn": [
        "pkg:golang/google.golang.org/protobuf@v1.36.11"
      ]
    },
    {
      "ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.0",
      "dependsOn": [
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/golang.org/x/net@v0.52.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.36.0",
      "dependsOn": [
        "pkg:golang/go.opentelemetry.io/proto/otlp@v1.10.0",
        "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/github.com/cncf/xds/go@v0.0.0-20251210132809-ee656c7534f5",
        "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.0",
        "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10"
      ]
    },
    {
      "ref": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10",
      "dependsOn": [
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.10.0",
      "dependsOn": [
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.28.0",
        "pkg:golang/google.golang.org/grpc@v1.80.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.28.0",
      "dependsOn": [
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
        "pkg:golang/golang.org/x/oauth2@v0.36.0",
        "pkg:golang/golang.org/x/text@v0.35.0",
        "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/google.golang.org/grpc@v1.80.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.6.0",
      "dependsOn": [
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4",
        "pkg:golang/github.com/microsoft/go-winio@v0.6.2",
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.40.0",
      "dependsOn": [
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcp@v1.31.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
        "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcp@v1.31.0",
      "dependsOn": [
        "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20260406210006-6f92a3bedf2d",
      "dependsOn": [
        "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/cloud.google.com/go/iam@v1.7.0",
        "pkg:golang/cloud.google.com/go/longrunning@v0.9.0",
        "pkg:golang/cloud.google.com/go/monitoring@v1.25.0",
        "pkg:golang/cloud.google.com/go/spanner@v1.89.0"
      ]
    },
    {
      "ref": "pkg:golang/cloud.google.com/go/monitoring@v1.25.0",
      "dependsOn": [
        "pkg:golang/google.golang.org/genproto@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/cloud.google.com/go/longrunning@v0.9.0",
        "pkg:golang/github.com/googleapis/gax-go/v2@v2.21.0",
        "pkg:golang/google.golang.org/api@v0.275.0",
        "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260406210006-6f92a3bedf2d"
      ]
    },
    {
      "ref": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.68.0",
      "dependsOn": [
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/go.opentelemetry.io/otel/metric@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0"
      ]
    },
    {
      "ref": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.68.0",
      "dependsOn": [
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
        "pkg:golang/github.com/felixge/httpsnoop@v1.0.4",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/go.opentelemetry.io/otel/metric@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/exporter/metric@v0.55.0",
      "dependsOn": [
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/internal/resourcemapping@v0.55.0",
        "pkg:golang/github.com/googleapis/gax-go/v2@v2.21.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/metric@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
        "pkg:golang/golang.org/x/oauth2@v0.36.0",
        "pkg:golang/google.golang.org/api@v0.275.0",
        "pkg:golang/cloud.google.com/go/monitoring@v1.25.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.43.0",
        "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260406210006-6f92a3bedf2d"
      ]
    },
    {
      "ref": "pkg:golang/github.com/googlecloudplatform/opentelemetry-operations-go/internal/resourcemapping@v0.55.0",
      "dependsOn": [
        "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/googlecloudplatform/grpc-gcp-go/grpcgcp@v1.6.0",
      "dependsOn": [
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/go.opentelemetry.io/otel/metric@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.43.0"
      ]
    },
    {
      "ref": "pkg:golang/go.opencensus.io@v0.24.0",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/golang.org/x/net@v0.52.0",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8",
        "pkg:golang/github.com/google/go-cmp@v0.7.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/aws/aws-sdk-go@v1.55.8",
      "dependsOn": [
        "pkg:golang/github.com/jmespath/go-jmespath@v0.4.1-0.20220621161143-b0104c826a24"
      ]
    },
    {
      "ref": "pkg:golang/github.com/jmespath/go-jmespath@v0.4.1-0.20220621161143-b0104c826a24",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/azure/go-autorest/autorest/adal@v0.9.24",
      "dependsOn": [
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/github.com/azure/go-autorest/autorest/date@v0.3.1",
        "pkg:golang/github.com/azure/go-autorest/logger@v0.2.2",
        "pkg:golang/github.com/azure/go-autorest/tracing@v0.6.1",
        "pkg:golang/github.com/azure/go-autorest@v14.2.0+incompatible",
        "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2",
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/azure/go-autorest/autorest/date@v0.3.1",
      "dependsOn": [
        "pkg:golang/github.com/azure/go-autorest@v14.2.0+incompatible"
      ]
    },
    {
      "ref": "pkg:golang/github.com/azure/go-autorest@v14.2.0+incompatible",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/azure/go-autorest/logger@v0.2.2",
      "dependsOn": [
        "pkg:golang/github.com/azure/go-autorest@v14.2.0+incompatible"
      ]
    },
    {
      "ref": "pkg:golang/github.com/azure/go-autorest/tracing@v0.6.1",
      "dependsOn": [
        "pkg:golang/github.com/azure/go-autorest@v14.2.0+incompatible"
      ]
    },
    {
      "ref": "pkg:golang/github.com/clickhouse/clickhouse-go@v1.5.4",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/cloudflare/golz4@v0.0.0-20150217214814-ef862a3cdc58"
      ]
    },
    {
      "ref": "pkg:golang/github.com/cloudflare/golz4@v0.0.0-20150217214814-ef862a3cdc58",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/cockroachdb/cockroach-go/v2@v2.1.1",
      "dependsOn": [
        "pkg:golang/github.com/lib/pq@v1.12.3",
        "pkg:golang/github.com/pkg/errors@v0.9.1",
        "pkg:golang/gorm.io/driver/postgres@v1.6.0",
        "pkg:golang/gorm.io/gorm@v1.31.1",
        "pkg:golang/github.com/jackc/pgx/v4@v4.18.2"
      ]
    },
    {
      "ref": "pkg:golang/github.com/jackc/pgx/v4@v4.18.2",
      "dependsOn": [
        "pkg:golang/github.com/shopspring/decimal@v1.4.0",
        "pkg:golang/github.com/sirupsen/logrus@v1.9.4",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/go.uber.org/zap@v1.27.1",
        "pkg:golang/github.com/jackc/pgconn@v1.14.3",
        "pkg:golang/github.com/jackc/pgio@v1.0.0",
        "pkg:golang/github.com/jackc/pgproto3/v2@v2.3.3",
        "pkg:golang/github.com/jackc/pgtype@v1.14.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/jackc/pgconn@v1.14.3",
      "dependsOn": [
        "pkg:golang/github.com/jackc/chunkreader/v2@v2.0.1",
        "pkg:golang/github.com/jackc/pgio@v1.0.0",
        "pkg:golang/github.com/jackc/pgpassfile@v1.0.0",
        "pkg:golang/github.com/jackc/pgproto3/v2@v2.3.3",
        "pkg:golang/github.com/jackc/pgservicefile@v0.0.0-20240606120523-5a60cdf6a761",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/golang.org/x/text@v0.35.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/jackc/chunkreader/v2@v2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/jackc/pgio@v1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/jackc/pgproto3/v2@v2.3.3",
      "dependsOn": [
        "pkg:golang/github.com/jackc/chunkreader/v2@v2.0.1",
        "pkg:golang/github.com/jackc/pgio@v1.0.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/jackc/pgtype@v1.14.0",
      "dependsOn": [
        "pkg:golang/github.com/shopspring/decimal@v1.4.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/jackc/pgconn@v1.14.3",
        "pkg:golang/github.com/jackc/pgio@v1.0.0",
        "pkg:golang/github.com/jackc/pgx/v4@v4.18.2",
        "pkg:golang/github.com/lib/pq@v1.12.3"
      ]
    },
    {
      "ref": "pkg:golang/github.com/gocql/gocql@v0.0.0-20210515062232-b7ef815b4556",
      "dependsOn": [
        "pkg:golang/github.com/hailocab/go-hostpool@v0.0.0-20160125115350-e80d13ce29ed",
        "pkg:golang/gopkg.in/inf.v0@v0.9.1",
        "pkg:golang/github.com/golang/snappy@v1.0.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/golang/snappy@v1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/hailocab/go-hostpool@v0.0.0-20160125115350-e80d13ce29ed",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/google/go-github/v39@v39.2.0",
      "dependsOn": [
        "pkg:golang/github.com/google/go-querystring@v1.2.0",
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/golang.org/x/oauth2@v0.36.0",
        "pkg:golang/github.com/google/go-cmp@v0.7.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/jackc/pgerrcode@v0.0.0-20240316143900-6e2875d9b438",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/ktrysmt/go-bitbucket@v0.6.4",
      "dependsOn": [
        "pkg:golang/golang.org/x/net@v0.52.0",
        "pkg:golang/golang.org/x/oauth2@v0.36.0",
        "pkg:golang/github.com/k0kubun/pp@v2.3.0+incompatible",
        "pkg:golang/github.com/mitchellh/mapstructure@v1.5.1-0.20231216201459-8508981c8b6c"
      ]
    },
    {
      "ref": "pkg:golang/github.com/k0kubun/pp@v2.3.0+incompatible",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.1-0.20231216201459-8508981c8b6c",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/mattn/go-sqlite3@v1.14.28",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/mutecomm/go-sqlcipher/v4@v4.4.0",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/golang.org/x/net@v0.52.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/nakagami/firebirdsql@v0.0.0-20190310045651-3c02a58cfed8",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/neo4j/neo4j-go-driver@v1.8.1-0.20200803113522-b626aa943eba",
      "dependsOn": [
        "pkg:golang/github.com/pkg/errors@v0.9.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/rqlite/gorqlite@v0.0.0-20230708021416-2acd02b70b79",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/snowflakedb/gosnowflake@v1.6.19",
      "dependsOn": [
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/github.com/apache/arrow/go/v10@v10.0.1",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/s3/manager@v1.22.13",
        "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.21.0",
        "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/storage/azblob@v1.6.4",
        "pkg:golang/github.com/form3tech-oss/jwt-go@v3.2.5+incompatible",
        "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.13",
        "pkg:golang/github.com/aws/smithy-go@v1.24.3",
        "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c",
        "pkg:golang/github.com/sirupsen/logrus@v1.9.4",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.14",
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5",
        "pkg:golang/github.com/99designs/keyring@v1.2.1",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.99.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/99designs/keyring@v1.2.1",
      "dependsOn": [
        "pkg:golang/golang.org/x/sys@v0.42.0",
        "pkg:golang/github.com/danieljoos/wincred@v1.2.3",
        "pkg:golang/github.com/gsterjov/go-libsecret@v0.0.0-20161001094733-a6f4afe4910c",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/golang.org/x/term@v0.41.0",
        "pkg:golang/github.com/99designs/go-keychain@v0.0.0-20191008050251-8e49817e8af4",
        "pkg:golang/github.com/dvsekhvalnov/jose2go@v1.7.0",
        "pkg:golang/github.com/mtibben/percent@v0.2.1",
        "pkg:golang/github.com/godbus/dbus@v0.0.0-20190726142602-4481cbc300e2"
      ]
    },
    {
      "ref": "pkg:golang/github.com/99designs/go-keychain@v0.0.0-20191008050251-8e49817e8af4",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/danieljoos/wincred@v1.2.3",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/dvsekhvalnov/jose2go@v1.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/godbus/dbus@v0.0.0-20190726142602-4481cbc300e2",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/gsterjov/go-libsecret@v0.0.0-20161001094733-a6f4afe4910c",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/mtibben/percent@v0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/apache/arrow/go/v10@v10.0.1",
      "dependsOn": [
        "pkg:golang/github.com/minio/c2goasm@v0.0.0-20190812172519-36a3d3bbc4f3",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/github.com/apache/thrift@v0.16.0",
        "pkg:golang/golang.org/x/exp@v0.0.0-20260312153236-7ab1446f8b90",
        "pkg:golang/github.com/goccy/go-json@v0.10.6",
        "pkg:golang/github.com/pierrec/lz4/v4@v4.1.26",
        "pkg:golang/github.com/golang/snappy@v1.0.0",
        "pkg:golang/github.com/klauspost/compress@v1.18.5",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/github.com/klauspost/asmfmt@v1.3.2",
        "pkg:golang/golang.org/x/xerrors@v0.0.0-20240903120638-7835f813f4da",
        "pkg:golang/github.com/andybalholm/brotli@v1.2.1",
        "pkg:golang/golang.org/x/sys@v0.42.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/modernc.org/sqlite@v1.48.1",
        "pkg:golang/github.com/zeebo/xxh3@v1.0.2",
        "pkg:golang/github.com/google/flatbuffers@v25.2.10+incompatible",
        "pkg:golang/golang.org/x/sync@v0.20.0",
        "pkg:golang/golang.org/x/tools@v0.43.0",
        "pkg:golang/github.com/minio/asm2plan9s@v0.0.0-20200509001527-cdd76441f9d8"
      ]
    },
    {
      "ref": "pkg:golang/github.com/apache/thrift@v0.16.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/goccy/go-json@v0.10.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/google/flatbuffers@v25.2.10+incompatible",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/klauspost/asmfmt@v1.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/minio/asm2plan9s@v0.0.0-20200509001527-cdd76441f9d8",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/minio/c2goasm@v0.0.0-20190812172519-36a3d3bbc4f3",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/zeebo/xxh3@v1.0.2",
      "dependsOn": [
        "pkg:golang/github.com/klauspost/cpuid/v2@v2.3.0"
      ]
    },
    {
      "ref": "pkg:golang/golang.org/x/exp@v0.0.0-20260312153236-7ab1446f8b90",
      "dependsOn": [
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/golang.org/x/mod@v0.34.0",
        "pkg:golang/golang.org/x/tools@v0.43.0"
      ]
    },
    {
      "ref": "pkg:golang/golang.org/x/xerrors@v0.0.0-20240903120638-7835f813f4da",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.14",
      "dependsOn": [
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5",
        "pkg:golang/github.com/aws/smithy-go@v1.24.3",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.21",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.0.9",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.30.15",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.35.19",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.41.10"
      ]
    },
    {
      "ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.21",
      "dependsOn": [
        "pkg:golang/github.com/aws/smithy-go@v1.24.3",
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5"
      ]
    },
    {
      "ref": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5",
      "dependsOn": [
        "pkg:golang/github.com/aws/smithy-go@v1.24.3"
      ]
    },
    {
      "ref": "pkg:golang/github.com/aws/smithy-go@v1.24.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.0.9",
      "dependsOn": [
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.21",
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5",
        "pkg:golang/github.com/aws/smithy-go@v1.24.3",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.21"
      ]
    },
    {
      "ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.21",
      "dependsOn": [
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5"
      ]
    },
    {
      "ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.21",
      "dependsOn": [
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5",
        "pkg:golang/github.com/aws/smithy-go@v1.24.3"
      ]
    },
    {
      "ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.30.15",
      "dependsOn": [
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5",
        "pkg:golang/github.com/aws/smithy-go@v1.24.3",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.21",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.21"
      ]
    },
    {
      "ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.35.19",
      "dependsOn": [
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.21",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.21",
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5",
        "pkg:golang/github.com/aws/smithy-go@v1.24.3"
      ]
    },
    {
      "ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.41.10",
      "dependsOn": [
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.21",
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5",
        "pkg:golang/github.com/aws/smithy-go@v1.24.3",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.21",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.21",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.7"
      ]
    },
    {
      "ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.7",
      "dependsOn": [
        "pkg:golang/github.com/aws/smithy-go@v1.24.3"
      ]
    },
    {
      "ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.21",
      "dependsOn": [
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5",
        "pkg:golang/github.com/aws/smithy-go@v1.24.3"
      ]
    },
    {
      "ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/s3/manager@v1.22.13",
      "dependsOn": [
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5",
        "pkg:golang/github.com/aws/smithy-go@v1.24.3",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.14",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.14",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.99.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.14",
      "dependsOn": [
        "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.14",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/ini@v1.8.6",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.35.19",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.30.15",
        "pkg:golang/github.com/aws/smithy-go@v1.24.3",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.21",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.0.9",
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.41.10"
      ]
    },
    {
      "ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/ini@v1.8.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.99.0",
      "dependsOn": [
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.21",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.9.13",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.8",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.22",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.7",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.21",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.19.21",
        "pkg:golang/github.com/aws/smithy-go@v1.24.3",
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.21"
      ]
    },
    {
      "ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.8",
      "dependsOn": [
        "pkg:golang/github.com/aws/smithy-go@v1.24.3"
      ]
    },
    {
      "ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.22",
      "dependsOn": [
        "pkg:golang/github.com/aws/smithy-go@v1.24.3",
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5"
      ]
    },
    {
      "ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.9.13",
      "dependsOn": [
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5",
        "pkg:golang/github.com/aws/smithy-go@v1.24.3",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.21"
      ]
    },
    {
      "ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.19.21",
      "dependsOn": [
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5",
        "pkg:golang/github.com/aws/smithy-go@v1.24.3"
      ]
    },
    {
      "ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/storage/azblob@v1.6.4",
      "dependsOn": [
        "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.21.0",
        "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.12.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/form3tech-oss/jwt-go@v3.2.5+incompatible",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c",
      "dependsOn": [
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/xanzy/go-gitlab@v0.15.0",
      "dependsOn": [
        "pkg:golang/github.com/google/go-querystring@v1.2.0",
        "pkg:golang/golang.org/x/oauth2@v0.36.0"
      ]
    },
    {
      "ref": "pkg:golang/go.mongodb.org/mongo-driver@v1.17.9",
      "dependsOn": [
        "pkg:golang/github.com/montanaflynn/stats@v0.7.1",
        "pkg:golang/github.com/xdg-go/scram@v1.1.2",
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/github.com/golang/snappy@v1.0.0",
        "pkg:golang/github.com/xdg-go/stringprep@v1.0.4",
        "pkg:golang/golang.org/x/sync@v0.20.0",
        "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78",
        "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/github.com/klauspost/compress@v1.18.5"
      ]
    },
    {
      "ref": "pkg:golang/github.com/montanaflynn/stats@v0.7.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/xdg-go/scram@v1.1.2",
      "dependsOn": [
        "pkg:golang/github.com/xdg-go/pbkdf2@v1.0.0",
        "pkg:golang/github.com/xdg-go/stringprep@v1.0.4"
      ]
    },
    {
      "ref": "pkg:golang/github.com/xdg-go/pbkdf2@v1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/xdg-go/stringprep@v1.0.4",
      "dependsOn": [
        "pkg:golang/golang.org/x/text@v0.35.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78",
      "dependsOn": [
        "pkg:golang/golang.org/x/crypto@v0.49.0"
      ]
    },
    {
      "ref": "pkg:golang/golang.org/x/tools/godoc@v0.1.0-deprecated",
      "dependsOn": [
        "pkg:golang/golang.org/x/tools@v0.43.0"
      ]
    },
    {
      "ref": "pkg:golang/modernc.org/ql@v1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/google/go-containerregistry@v0.21.4",
      "dependsOn": [
        "pkg:golang/github.com/moby/docker-image-spec@v1.3.1",
        "pkg:golang/golang.org/x/oauth2@v0.36.0",
        "pkg:golang/github.com/spf13/cobra@v1.10.2",
        "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
        "pkg:golang/golang.org/x/sync@v0.20.0",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/golang.org/x/tools@v0.43.0",
        "pkg:golang/github.com/containerd/stargz-snapshotter/estargz@v0.18.2",
        "pkg:golang/github.com/docker/cli@v29.4.0+incompatible",
        "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0",
        "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
        "pkg:golang/github.com/klauspost/compress@v1.18.5"
      ]
    },
    {
      "ref": "pkg:golang/github.com/containerd/stargz-snapshotter/estargz@v0.18.2",
      "dependsOn": [
        "pkg:golang/golang.org/x/sync@v0.20.0",
        "pkg:golang/github.com/klauspost/compress@v1.18.5",
        "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
        "pkg:golang/github.com/vbatts/tar-split@v0.12.2"
      ]
    },
    {
      "ref": "pkg:golang/github.com/vbatts/tar-split@v0.12.2",
      "dependsOn": [
        "pkg:golang/github.com/fatih/color@v1.19.0",
        "pkg:golang/github.com/sirupsen/logrus@v1.9.4",
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/fatih/color@v1.19.0",
      "dependsOn": [
        "pkg:golang/github.com/mattn/go-isatty@v0.0.20",
        "pkg:golang/golang.org/x/sys@v0.42.0",
        "pkg:golang/github.com/mattn/go-colorable@v0.1.14"
      ]
    },
    {
      "ref": "pkg:golang/github.com/mattn/go-colorable@v0.1.14",
      "dependsOn": [
        "pkg:golang/github.com/mattn/go-isatty@v0.0.20",
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/docker/cli@v29.4.0+incompatible",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1",
      "dependsOn": [
        "pkg:golang/github.com/opencontainers/image-spec@v1.1.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/google/go-github/v62@v62.0.0",
      "dependsOn": [
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/github.com/google/go-querystring@v1.2.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/google/licensecheck@v0.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/gosimple/slug@v1.15.0",
      "dependsOn": [
        "pkg:golang/github.com/gosimple/unidecode@v1.0.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/gosimple/unidecode@v1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8",
      "dependsOn": [
        "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2"
      ]
    },
    {
      "ref": "pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/in-toto/attestation@v1.2.0",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/google.golang.org/protobuf@v1.36.11"
      ]
    },
    {
      "ref": "pkg:golang/github.com/in-toto/go-witness@v0.9.2",
      "dependsOn": [
        "pkg:golang/github.com/edwarnicke/gitoid@v0.0.0-20220710194850-1be5bfda1f9d",
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5",
        "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20250730155240-ffadbf3f398c",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/github.com/invopop/jsonschema@v0.13.0",
        "pkg:golang/golang.org/x/exp@v0.0.0-20260312153236-7ab1446f8b90",
        "pkg:golang/github.com/spf13/viper@v1.21.0",
        "pkg:golang/k8s.io/apimachinery@v0.35.3",
        "pkg:golang/google.golang.org/api@v0.275.0",
        "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.6.0",
        "pkg:golang/k8s.io/client-go@v0.35.3",
        "pkg:golang/github.com/sigstore/cosign/v2@v2.6.3",
        "pkg:golang/github.com/in-toto/attestation@v1.2.0",
        "pkg:golang/github.com/open-policy-agent/opa@v1.15.1",
        "pkg:golang/golang.org/x/mod@v0.34.0",
        "pkg:golang/go.step.sm/crypto@v0.77.2",
        "pkg:golang/github.com/google/go-containerregistry@v0.21.4",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/gopkg.in/go-jose/go-jose.v2@v2.6.3",
        "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20250524132541-c45532741eea",
        "pkg:golang/github.com/sigstore/fulcio@v1.8.5",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0",
        "pkg:golang/github.com/mattn/go-isatty@v0.0.20",
        "pkg:golang/github.com/cyclonedx/cyclonedx-go@v0.10.0",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.14",
        "pkg:golang/github.com/sigstore/sigstore@v1.10.5",
        "pkg:golang/github.com/go-git/go-git/v5@v5.17.2",
        "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.10.0",
        "pkg:golang/github.com/openvex/go-vex@v0.2.8",
        "pkg:golang/k8s.io/api@v0.35.3",
        "pkg:golang/golang.org/x/sys@v0.42.0",
        "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
        "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.13",
        "pkg:golang/github.com/gobwas/glob@v0.2.3",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.21"
      ]
    },
    {
      "ref": "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20250730155240-ffadbf3f398c",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20250524132541-c45532741eea",
      "dependsOn": [
        "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20250730155240-ffadbf3f398c"
      ]
    },
    {
      "ref": "pkg:golang/github.com/edwarnicke/gitoid@v0.0.0-20220710194850-1be5bfda1f9d",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/invopop/jsonschema@v0.13.0",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/wk8/go-ordered-map/v2@v2.1.8"
      ]
    },
    {
      "ref": "pkg:golang/github.com/wk8/go-ordered-map/v2@v2.1.8",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
        "pkg:golang/github.com/bahlo/generic-list-go@v0.2.0",
        "pkg:golang/github.com/buger/jsonparser@v1.1.2",
        "pkg:golang/github.com/mailru/easyjson@v0.9.2"
      ]
    },
    {
      "ref": "pkg:golang/github.com/bahlo/generic-list-go@v0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/buger/jsonparser@v1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/mailru/easyjson@v0.9.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/open-policy-agent/opa@v1.15.1",
      "dependsOn": [
        "pkg:golang/gopkg.in/ini.v1@v1.67.1",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/golang.org/x/net@v0.52.0",
        "pkg:golang/golang.org/x/time@v0.15.0",
        "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9",
        "pkg:golang/github.com/google/uuid@v1.6.0",
        "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3",
        "pkg:golang/github.com/sirupsen/logrus@v1.9.4",
        "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0",
        "pkg:golang/golang.org/x/text@v0.35.0",
        "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0",
        "pkg:golang/github.com/spf13/cobra@v1.10.2",
        "pkg:golang/github.com/gobwas/glob@v0.2.3",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/github.com/containerd/errdefs@v1.0.0",
        "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.0.13",
        "pkg:golang/github.com/go-logr/logr@v1.4.3",
        "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
        "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
        "pkg:golang/golang.org/x/sync@v0.20.0",
        "pkg:golang/github.com/sergi/go-diff@v1.4.0",
        "pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7",
        "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
        "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
        "pkg:golang/github.com/spf13/pflag@v1.0.10",
        "pkg:golang/github.com/spf13/viper@v1.21.0",
        "pkg:golang/sigs.k8s.io/yaml@v1.6.0",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0",
        "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.32",
        "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415",
        "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.68.0",
        "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0",
        "pkg:golang/github.com/fsnotify/fsnotify@v1.9.0",
        "pkg:golang/github.com/agnivade/levenshtein@v1.2.1",
        "pkg:golang/oras.land/oras-go/v2@v2.6.0",
        "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/fsnotify/fsnotify@v1.9.0",
      "dependsOn": [
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.0.13",
      "dependsOn": [
        "pkg:golang/github.com/lestrrat-go/dsig-secp256k1@v1.0.0",
        "pkg:golang/github.com/lestrrat-go/dsig@v1.2.1",
        "pkg:golang/github.com/valyala/fastjson@v1.6.10",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0",
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/github.com/goccy/go-json@v0.10.6",
        "pkg:golang/github.com/decred/dcrd/dcrec/secp256k1/v4@v4.4.1",
        "pkg:golang/github.com/segmentio/asm@v1.2.1",
        "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4",
        "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.5"
      ]
    },
    {
      "ref": "pkg:golang/github.com/decred/dcrd/dcrec/secp256k1/v4@v4.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/lestrrat-go/dsig-secp256k1@v1.0.0",
      "dependsOn": [
        "pkg:golang/github.com/lestrrat-go/dsig@v1.2.1",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/decred/dcrd/dcrec/secp256k1/v4@v4.4.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/lestrrat-go/dsig@v1.2.1",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.5",
      "dependsOn": [
        "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4",
        "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1",
        "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0",
      "dependsOn": [
        "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4",
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/valyala/fastjson@v1.6.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/spf13/viper@v1.21.0",
      "dependsOn": [
        "pkg:golang/github.com/spf13/afero@v1.15.0",
        "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0",
        "pkg:golang/github.com/fsnotify/fsnotify@v1.9.0",
        "pkg:golang/github.com/pelletier/go-toml/v2@v2.3.0",
        "pkg:golang/github.com/sagikazarmark/locafero@v0.12.0",
        "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
        "pkg:golang/github.com/spf13/cast@v1.10.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/subosito/gotenv@v1.6.0",
        "pkg:golang/github.com/spf13/pflag@v1.0.10"
      ]
    },
    {
      "ref": "pkg:golang/github.com/pelletier/go-toml/v2@v2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/sagikazarmark/locafero@v0.12.0",
      "dependsOn": [
        "pkg:golang/github.com/spf13/afero@v1.15.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/spf13/afero@v1.15.0",
      "dependsOn": [
        "pkg:golang/golang.org/x/text@v0.35.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/spf13/cast@v1.10.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/subosito/gotenv@v1.6.0",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/golang.org/x/text@v0.35.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.32",
      "dependsOn": [
        "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
        "pkg:golang/github.com/agnivade/levenshtein@v1.2.1",
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0",
      "dependsOn": [
        "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3",
        "pkg:golang/go.opentelemetry.io/proto/otlp@v1.10.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/go.opentelemetry.io/otel/metric@v1.43.0",
        "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0"
      ]
    },
    {
      "ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0",
      "dependsOn": [
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
        "pkg:golang/go.opentelemetry.io/proto/otlp@v1.10.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0"
      ]
    },
    {
      "ref": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0",
      "dependsOn": [
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/github.com/go-logr/logr@v1.4.3",
        "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/metric@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.43.0",
        "pkg:golang/go.opentelemetry.io/proto/otlp@v1.10.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3",
        "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0"
      ]
    },
    {
      "ref": "pkg:golang/gopkg.in/ini.v1@v1.67.1",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/oras.land/oras-go/v2@v2.6.0",
      "dependsOn": [
        "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
        "pkg:golang/golang.org/x/sync@v0.20.0",
        "pkg:golang/github.com/opencontainers/go-digest@v1.0.0"
      ]
    },
    {
      "ref": "pkg:golang/sigs.k8s.io/yaml@v1.6.0",
      "dependsOn": [
        "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
        "pkg:golang/sigs.k8s.io/randfill@v1.0.0",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/go.yaml.in/yaml/v2@v2.4.4"
      ]
    },
    {
      "ref": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/sigs.k8s.io/randfill@v1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/openvex/go-vex@v0.2.8",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/github.com/in-toto/attestation@v1.2.0",
        "pkg:golang/github.com/package-url/packageurl-go@v0.1.5"
      ]
    },
    {
      "ref": "pkg:golang/github.com/package-url/packageurl-go@v0.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.10.0",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/golang.org/x/crypto@v0.49.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/sigstore/cosign/v2@v2.6.3",
      "dependsOn": [
        "pkg:golang/github.com/spf13/pflag@v1.0.10",
        "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.6.0",
        "pkg:golang/github.com/mozillazg/docker-credential-acr-helper@v0.4.0",
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/github.com/go-piv/piv-go/v2@v2.5.0",
        "pkg:golang/github.com/spf13/cobra@v1.10.2",
        "pkg:golang/golang.org/x/term@v0.41.0",
        "pkg:golang/github.com/in-toto/in-toto-golang@v0.10.0",
        "pkg:golang/github.com/go-openapi/strfmt@v0.26.1",
        "pkg:golang/k8s.io/client-go@v0.35.3",
        "pkg:golang/golang.org/x/oauth2@v0.36.0",
        "pkg:golang/k8s.io/api@v0.35.3",
        "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1",
        "pkg:golang/github.com/go-openapi/swag/conv@v0.25.5",
        "pkg:golang/github.com/spf13/viper@v1.21.0",
        "pkg:golang/github.com/moby/term@v0.5.2",
        "pkg:golang/github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589",
        "pkg:golang/gitlab.com/gitlab-org/api/client-go@v1.46.0",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/github.com/withfig/autocomplete-tools/integrations/cobra@v1.2.1",
        "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20250524132541-c45532741eea",
        "pkg:golang/github.com/go-openapi/runtime@v0.29.3",
        "pkg:golang/github.com/open-policy-agent/opa@v1.15.1",
        "pkg:golang/github.com/google/certificate-transparency-go@v1.3.3",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/transparency-dev/merkle@v0.0.2",
        "pkg:golang/github.com/dustin/go-humanize@v1.0.1",
        "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4",
        "pkg:golang/github.com/buildkite/agent/v3@v3.121.1",
        "pkg:golang/github.com/go-openapi/swag@v0.25.5",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/github.com/sigstore/rekor@v1.5.1",
        "pkg:golang/k8s.io/apimachinery@v0.35.3",
        "pkg:golang/golang.org/x/sync@v0.20.0",
        "pkg:golang/github.com/sigstore/sigstore@v1.10.5",
        "pkg:golang/github.com/sigstore/timestamp-authority/v2@v2.0.5",
        "pkg:golang/github.com/manifoldco/promptui@v0.9.0",
        "pkg:golang/github.com/sigstore/sigstore-go@v1.1.4",
        "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467",
        "pkg:golang/cuelang.org/go@v0.16.0",
        "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1",
        "pkg:golang/github.com/in-toto/attestation@v1.2.0",
        "pkg:golang/github.com/thalesignite/crypto11@v1.2.5",
        "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.10.0",
        "pkg:golang/k8s.io/utils@v0.0.0-20260319190234-28399d86e0b5",
        "pkg:golang/github.com/theupdateframework/go-tuf/v2@v2.4.1",
        "pkg:golang/github.com/sigstore/rekor-tiles/v2@v2.2.1",
        "pkg:golang/google.golang.org/api@v0.275.0",
        "pkg:golang/github.com/google/go-github/v73@v73.0.0",
        "pkg:golang/github.com/miekg/pkcs11@v1.1.2",
        "pkg:golang/github.com/awslabs/amazon-ecr-credential-helper/ecr-login@v0.12.0",
        "pkg:golang/sigs.k8s.io/release-utils@v0.12.4",
        "pkg:golang/github.com/google/go-containerregistry@v0.21.4",
        "pkg:golang/github.com/sigstore/fulcio@v1.8.5",
        "pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481"
      ]
    },
    {
      "ref": "pkg:golang/cuelang.org/go@v0.16.0",
      "dependsOn": [
        "pkg:golang/github.com/google/uuid@v1.6.0",
        "pkg:golang/github.com/protocolbuffers/txtpbfmt@v0.0.0-20260217160748-a481f6a22f94",
        "pkg:golang/golang.org/x/text@v0.35.0",
        "pkg:golang/golang.org/x/tools@v0.43.0",
        "pkg:golang/golang.org/x/mod@v0.34.0",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
        "pkg:golang/github.com/emicklei/proto@v1.14.3",
        "pkg:golang/github.com/rogpeppe/go-internal@v1.14.1",
        "pkg:golang/github.com/spf13/pflag@v1.0.10",
        "pkg:golang/golang.org/x/net@v0.52.0",
        "pkg:golang/golang.org/x/oauth2@v0.36.0",
        "pkg:golang/github.com/pelletier/go-toml/v2@v2.3.0",
        "pkg:golang/cuelabs.dev/go/oci/ociregistry@v0.0.0-20251212221603-3adeb8663819",
        "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
        "pkg:golang/github.com/cockroachdb/apd/v3@v3.2.3",
        "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
        "pkg:golang/golang.org/x/sync@v0.20.0",
        "pkg:golang/github.com/spf13/cobra@v1.10.2"
      ]
    },
    {
      "ref": "pkg:golang/cuelabs.dev/go/oci/ociregistry@v0.0.0-20251212221603-3adeb8663819",
      "dependsOn": [
        "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
        "pkg:golang/github.com/rogpeppe/go-internal@v1.14.1",
        "pkg:golang/github.com/opencontainers/go-digest@v1.0.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.14.1",
      "dependsOn": [
        "pkg:golang/golang.org/x/mod@v0.34.0",
        "pkg:golang/golang.org/x/sys@v0.42.0",
        "pkg:golang/golang.org/x/tools@v0.43.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/cockroachdb/apd/v3@v3.2.3",
      "dependsOn": [
        "pkg:golang/github.com/lib/pq@v1.12.3"
      ]
    },
    {
      "ref": "pkg:golang/github.com/emicklei/proto@v1.14.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/protocolbuffers/txtpbfmt@v0.0.0-20260217160748-a481f6a22f94",
      "dependsOn": [
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1",
        "pkg:golang/google.golang.org/protobuf@v1.36.11"
      ]
    },
    {
      "ref": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/awslabs/amazon-ecr-credential-helper/ecr-login@v0.12.0",
      "dependsOn": [
        "pkg:golang/github.com/sirupsen/logrus@v1.9.4",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.14",
        "pkg:golang/github.com/aws/smithy-go@v1.24.3",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.56.2",
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5",
        "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecrpublic@v1.38.13",
        "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.14"
      ]
    },
    {
      "ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.56.2",
      "dependsOn": [
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.21",
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5",
        "pkg:golang/github.com/aws/smithy-go@v1.24.3",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.21"
      ]
    },
    {
      "ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecrpublic@v1.38.13",
      "dependsOn": [
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5",
        "pkg:golang/github.com/aws/smithy-go@v1.24.3",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.21",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.21"
      ]
    },
    {
      "ref": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5",
      "dependsOn": [
        "pkg:golang/github.com/danieljoos/wincred@v1.2.3"
      ]
    },
    {
      "ref": "pkg:golang/github.com/buildkite/agent/v3@v3.121.1",
      "dependsOn": [
        "pkg:golang/golang.org/x/sys@v0.42.0",
        "pkg:golang/golang.org/x/term@v0.41.0",
        "pkg:golang/github.com/google/go-querystring@v1.2.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/s3/manager@v1.22.13",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.14",
        "pkg:golang/github.com/lestrrat-go/jwx/v2@v2.1.6",
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
        "pkg:golang/github.com/dustin/go-humanize@v1.0.1",
        "pkg:golang/connectrpc.com/connect@v1.19.1",
        "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0",
        "pkg:golang/github.com/buildkite/roko@v1.4.0",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.21",
        "pkg:golang/github.com/google/uuid@v1.6.0",
        "pkg:golang/golang.org/x/sync@v0.20.0",
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5",
        "pkg:golang/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go@v1.36.11-20260209202127-80ab13bee0bf.1",
        "pkg:golang/github.com/go-chi/chi/v5@v5.2.5",
        "pkg:golang/github.com/oleiade/reflections@v1.1.0",
        "pkg:golang/github.com/buildkite/interpolate@v0.1.5",
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0",
        "pkg:golang/golang.org/x/oauth2@v0.36.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/golang.org/x/net@v0.52.0",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
        "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/storage/azblob@v1.6.4",
        "pkg:golang/github.com/aws/smithy-go@v1.24.3",
        "pkg:golang/github.com/pborman/uuid@v1.2.1",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.99.0",
        "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0",
        "pkg:golang/github.com/buildkite/go-pipeline@v0.16.0",
        "pkg:golang/google.golang.org/api@v0.275.0"
      ]
    },
    {
      "ref": "pkg:golang/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go@v1.36.11-20260209202127-80ab13bee0bf.1",
      "dependsOn": [
        "pkg:golang/google.golang.org/protobuf@v1.36.11"
      ]
    },
    {
      "ref": "pkg:golang/connectrpc.com/connect@v1.19.1",
      "dependsOn": [
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11"
      ]
    },
    {
      "ref": "pkg:golang/github.com/buildkite/go-pipeline@v0.16.0",
      "dependsOn": [
        "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
        "pkg:golang/github.com/buildkite/interpolate@v0.1.5",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/github.com/lestrrat-go/jwx/v2@v2.1.6",
        "pkg:golang/github.com/oleiade/reflections@v1.1.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/buildkite/interpolate@v0.1.5",
      "dependsOn": [
        "pkg:golang/github.com/google/go-cmp@v0.7.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/lestrrat-go/jwx/v2@v2.1.6",
      "dependsOn": [
        "pkg:golang/github.com/goccy/go-json@v0.10.6",
        "pkg:golang/github.com/lestrrat-go/httprc@v1.0.6",
        "pkg:golang/github.com/lestrrat-go/iter@v1.0.2",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/segmentio/asm@v1.2.1",
        "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4",
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/github.com/decred/dcrd/dcrec/secp256k1/v4@v4.4.1",
        "pkg:golang/github.com/lestrrat-go/option@v1.0.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/lestrrat-go/httprc@v1.0.6",
      "dependsOn": [
        "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1",
        "pkg:golang/github.com/lestrrat-go/option@v1.0.1",
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/lestrrat-go/option@v1.0.1",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/lestrrat-go/iter@v1.0.2",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/oleiade/reflections@v1.1.0",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/buildkite/roko@v1.4.0",
      "dependsOn": [
        "pkg:golang/github.com/google/go-cmp@v0.7.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/go-chi/chi/v5@v5.2.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/pborman/uuid@v1.2.1",
      "dependsOn": [
        "pkg:golang/github.com/google/uuid@v1.6.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589",
      "dependsOn": [
        "pkg:golang/github.com/azure/go-autorest/autorest/adal@v0.9.24",
        "pkg:golang/github.com/azure/go-autorest/autorest/azure/auth@v0.5.13",
        "pkg:golang/github.com/azure/go-autorest/autorest@v0.11.30",
        "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5",
        "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0",
        "pkg:golang/github.com/spf13/viper@v1.21.0",
        "pkg:golang/github.com/azure/azure-sdk-for-go@v68.0.0+incompatible",
        "pkg:golang/github.com/spf13/cobra@v1.10.2"
      ]
    },
    {
      "ref": "pkg:golang/github.com/azure/azure-sdk-for-go@v68.0.0+incompatible",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/azure/go-autorest/autorest/azure/auth@v0.5.13",
      "dependsOn": [
        "pkg:golang/github.com/dimchansky/utfbom@v1.1.1",
        "pkg:golang/github.com/azure/go-autorest/autorest/adal@v0.9.24",
        "pkg:golang/github.com/azure/go-autorest/autorest/azure/cli@v0.4.7",
        "pkg:golang/github.com/azure/go-autorest/autorest@v0.11.30",
        "pkg:golang/github.com/azure/go-autorest/logger@v0.2.2",
        "pkg:golang/github.com/azure/go-autorest@v14.2.0+incompatible"
      ]
    },
    {
      "ref": "pkg:golang/github.com/azure/go-autorest/autorest/azure/cli@v0.4.7",
      "dependsOn": [
        "pkg:golang/github.com/azure/go-autorest/autorest/date@v0.3.1",
        "pkg:golang/github.com/azure/go-autorest@v14.2.0+incompatible",
        "pkg:golang/github.com/dimchansky/utfbom@v1.1.1",
        "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0",
        "pkg:golang/github.com/azure/go-autorest/autorest/adal@v0.9.24"
      ]
    },
    {
      "ref": "pkg:golang/github.com/dimchansky/utfbom@v1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/azure/go-autorest/autorest@v0.11.30",
      "dependsOn": [
        "pkg:golang/github.com/azure/go-autorest/logger@v0.2.2",
        "pkg:golang/github.com/azure/go-autorest/tracing@v0.6.1",
        "pkg:golang/github.com/azure/go-autorest@v14.2.0+incompatible",
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/github.com/azure/go-autorest/autorest/adal@v0.9.24"
      ]
    },
    {
      "ref": "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/go-openapi/runtime@v0.29.3",
      "dependsOn": [
        "pkg:golang/github.com/go-openapi/spec@v0.22.4",
        "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
        "pkg:golang/github.com/go-openapi/swag/fileutils@v0.25.5",
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
        "pkg:golang/github.com/docker/go-units@v0.5.0",
        "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.25.5",
        "pkg:golang/golang.org/x/sync@v0.20.0",
        "pkg:golang/github.com/go-openapi/swag/stringutils@v0.25.5",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
        "pkg:golang/github.com/go-openapi/strfmt@v0.26.1",
        "pkg:golang/github.com/go-openapi/analysis@v0.25.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0",
        "pkg:golang/github.com/go-openapi/swag/conv@v0.25.5",
        "pkg:golang/github.com/go-openapi/loads@v0.23.3",
        "pkg:golang/github.com/go-openapi/validate@v0.25.2",
        "pkg:golang/github.com/go-openapi/errors@v0.22.7"
      ]
    },
    {
      "ref": "pkg:golang/github.com/go-openapi/analysis@v0.25.0",
      "dependsOn": [
        "pkg:golang/golang.org/x/text@v0.35.0",
        "pkg:golang/github.com/go-openapi/jsonpointer@v0.22.5",
        "pkg:golang/github.com/go-openapi/spec@v0.22.4",
        "pkg:golang/github.com/go-openapi/strfmt@v0.26.1",
        "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.25.5",
        "pkg:golang/github.com/go-openapi/swag/loading@v0.25.5",
        "pkg:golang/github.com/go-openapi/swag/mangling@v0.25.5"
      ]
    },
    {
      "ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.22.5",
      "dependsOn": [
        "pkg:golang/github.com/go-openapi/swag/jsonname@v0.25.5"
      ]
    },
    {
      "ref": "pkg:golang/github.com/go-openapi/swag/jsonname@v0.25.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/go-openapi/spec@v0.22.4",
      "dependsOn": [
        "pkg:golang/github.com/go-openapi/swag/stringutils@v0.25.5",
        "pkg:golang/github.com/go-openapi/jsonpointer@v0.22.5",
        "pkg:golang/github.com/go-openapi/jsonreference@v0.21.5",
        "pkg:golang/github.com/go-openapi/swag/conv@v0.25.5",
        "pkg:golang/github.com/go-openapi/swag/jsonname@v0.25.5",
        "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.25.5",
        "pkg:golang/github.com/go-openapi/swag/loading@v0.25.5"
      ]
    },
    {
      "ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.21.5",
      "dependsOn": [
        "pkg:golang/github.com/go-openapi/jsonpointer@v0.22.5"
      ]
    },
    {
      "ref": "pkg:golang/github.com/go-openapi/swag/conv@v0.25.5",
      "dependsOn": [
        "pkg:golang/github.com/go-openapi/swag/typeutils@v0.25.5"
      ]
    },
    {
      "ref": "pkg:golang/github.com/go-openapi/swag/typeutils@v0.25.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.25.5",
      "dependsOn": [
        "pkg:golang/github.com/go-openapi/swag/conv@v0.25.5",
        "pkg:golang/github.com/go-openapi/swag/typeutils@v0.25.5"
      ]
    },
    {
      "ref": "pkg:golang/github.com/go-openapi/swag/loading@v0.25.5",
      "dependsOn": [
        "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.25.5"
      ]
    },
    {
      "ref": "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.25.5",
      "dependsOn": [
        "pkg:golang/github.com/go-openapi/swag/typeutils@v0.25.5",
        "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
        "pkg:golang/github.com/go-openapi/swag/conv@v0.25.5",
        "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.25.5"
      ]
    },
    {
      "ref": "pkg:golang/github.com/go-openapi/swag/stringutils@v0.25.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/go-openapi/strfmt@v0.26.1",
      "dependsOn": [
        "pkg:golang/github.com/oklog/ulid/v2@v2.1.1",
        "pkg:golang/golang.org/x/net@v0.52.0",
        "pkg:golang/github.com/go-openapi/errors@v0.22.7",
        "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0",
        "pkg:golang/github.com/google/uuid@v1.6.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/go-openapi/errors@v0.22.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/oklog/ulid/v2@v2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/go-openapi/swag/mangling@v0.25.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/go-openapi/loads@v0.23.3",
      "dependsOn": [
        "pkg:golang/github.com/go-openapi/swag/loading@v0.25.5",
        "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.25.5",
        "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
        "pkg:golang/github.com/go-openapi/analysis@v0.25.0",
        "pkg:golang/github.com/go-openapi/spec@v0.22.4"
      ]
    },
    {
      "ref": "pkg:golang/github.com/go-openapi/swag/fileutils@v0.25.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/go-openapi/validate@v0.25.2",
      "dependsOn": [
        "pkg:golang/github.com/go-openapi/errors@v0.22.7",
        "pkg:golang/github.com/go-openapi/analysis@v0.25.0",
        "pkg:golang/github.com/go-openapi/swag/conv@v0.25.5",
        "pkg:golang/github.com/go-openapi/swag/fileutils@v0.25.5",
        "pkg:golang/github.com/go-openapi/jsonpointer@v0.22.5",
        "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.25.5",
        "pkg:golang/github.com/go-openapi/swag/stringutils@v0.25.5",
        "pkg:golang/github.com/go-openapi/loads@v0.23.3",
        "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
        "pkg:golang/github.com/go-openapi/spec@v0.22.4",
        "pkg:golang/github.com/go-openapi/strfmt@v0.26.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/go-openapi/swag@v0.25.5",
      "dependsOn": [
        "pkg:golang/github.com/go-openapi/swag/stringutils@v0.25.5",
        "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.25.5",
        "pkg:golang/github.com/go-openapi/swag/typeutils@v0.25.5",
        "pkg:golang/github.com/go-openapi/swag/loading@v0.25.5",
        "pkg:golang/github.com/go-openapi/swag/conv@v0.25.5",
        "pkg:golang/github.com/go-openapi/swag/fileutils@v0.25.5",
        "pkg:golang/github.com/go-openapi/swag/netutils@v0.25.5",
        "pkg:golang/github.com/go-openapi/swag/jsonname@v0.25.5",
        "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.25.5",
        "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.25.5",
        "pkg:golang/github.com/go-openapi/swag/mangling@v0.25.5"
      ]
    },
    {
      "ref": "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.25.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/go-openapi/swag/netutils@v0.25.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/go-piv/piv-go/v2@v2.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/google/certificate-transparency-go@v1.3.3",
      "dependsOn": [
        "pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7",
        "pkg:golang/golang.org/x/time@v0.15.0",
        "pkg:golang/github.com/jackc/pgx/v5@v5.9.1",
        "pkg:golang/github.com/go-sql-driver/mysql@v1.9.3",
        "pkg:golang/github.com/spf13/pflag@v1.0.10",
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/github.com/sergi/go-diff@v1.4.0",
        "pkg:golang/github.com/spf13/cobra@v1.10.2",
        "pkg:golang/github.com/transparency-dev/merkle@v0.0.2",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/k8s.io/klog/v2@v2.140.0",
        "pkg:golang/github.com/google/go-cmp@v0.7.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/transparency-dev/merkle@v0.0.2",
      "dependsOn": [
        "pkg:golang/github.com/google/go-cmp@v0.7.0"
      ]
    },
    {
      "ref": "pkg:golang/k8s.io/klog/v2@v2.140.0",
      "dependsOn": [
        "pkg:golang/github.com/go-logr/logr@v1.4.3"
      ]
    },
    {
      "ref": "pkg:golang/github.com/google/go-github/v73@v73.0.0",
      "dependsOn": [
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/github.com/google/go-querystring@v1.2.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/in-toto/in-toto-golang@v0.10.0",
      "dependsOn": [
        "pkg:golang/github.com/spf13/cobra@v1.10.2",
        "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0",
        "pkg:golang/golang.org/x/sys@v0.42.0",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.6.0",
        "pkg:golang/github.com/in-toto/attestation@v1.2.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.10.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/manifoldco/promptui@v0.9.0",
      "dependsOn": [
        "pkg:golang/github.com/chzyer/readline@v1.5.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/chzyer/readline@v1.5.1",
      "dependsOn": [
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/miekg/pkcs11@v1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/mozillazg/docker-credential-acr-helper@v0.4.0",
      "dependsOn": [
        "pkg:golang/github.com/alibabacloud-go/cr-20160607@v1.0.1",
        "pkg:golang/github.com/alibabacloud-go/cr-20181201@v1.0.10",
        "pkg:golang/github.com/sirupsen/logrus@v1.9.4",
        "pkg:golang/github.com/alibabacloud-go/tea-utils@v1.4.5",
        "pkg:golang/github.com/alibabacloud-go/tea@v1.4.0",
        "pkg:golang/github.com/aliyun/credentials-go@v1.4.12",
        "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5",
        "pkg:golang/github.com/aliyuncontainerservice/ack-ram-tool/pkg/credentials/provider@v0.20.0",
        "pkg:golang/github.com/alibabacloud-go/darabonba-openapi@v0.2.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/alibabacloud-go/cr-20160607@v1.0.1",
      "dependsOn": [
        "pkg:golang/github.com/alibabacloud-go/tea-utils@v1.4.5",
        "pkg:golang/github.com/alibabacloud-go/tea@v1.4.0",
        "pkg:golang/github.com/alibabacloud-go/darabonba-openapi@v0.2.1",
        "pkg:golang/github.com/alibabacloud-go/endpoint-util@v1.1.1",
        "pkg:golang/github.com/alibabacloud-go/openapi-util@v0.1.2"
      ]
    },
    {
      "ref": "pkg:golang/github.com/alibabacloud-go/darabonba-openapi@v0.2.1",
      "dependsOn": [
        "pkg:golang/github.com/aliyun/credentials-go@v1.4.12",
        "pkg:golang/github.com/alibabacloud-go/alibabacloud-gateway-spi@v0.0.5",
        "pkg:golang/github.com/alibabacloud-go/openapi-util@v0.1.2",
        "pkg:golang/github.com/alibabacloud-go/tea-utils@v1.4.5",
        "pkg:golang/github.com/alibabacloud-go/tea-xml@v1.1.3",
        "pkg:golang/github.com/alibabacloud-go/tea@v1.4.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/alibabacloud-go/alibabacloud-gateway-spi@v0.0.5",
      "dependsOn": [
        "pkg:golang/github.com/alibabacloud-go/tea@v1.4.0",
        "pkg:golang/github.com/aliyun/credentials-go@v1.4.12"
      ]
    },
    {
      "ref": "pkg:golang/github.com/alibabacloud-go/tea@v1.4.0",
      "dependsOn": [
        "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee",
        "pkg:golang/golang.org/x/net@v0.52.0",
        "pkg:golang/github.com/alibabacloud-go/debug@v1.0.1",
        "pkg:golang/github.com/alibabacloud-go/tea-utils/v2@v2.0.9",
        "pkg:golang/github.com/clbanning/mxj/v2@v2.7.0",
        "pkg:golang/github.com/json-iterator/go@v1.1.12"
      ]
    },
    {
      "ref": "pkg:golang/github.com/alibabacloud-go/debug@v1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/alibabacloud-go/tea-utils/v2@v2.0.9",
      "dependsOn": [
        "pkg:golang/github.com/alibabacloud-go/tea@v1.4.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/clbanning/mxj/v2@v2.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/json-iterator/go@v1.1.12",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc",
        "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd",
        "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee"
      ]
    },
    {
      "ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/aliyun/credentials-go@v1.4.12",
      "dependsOn": [
        "pkg:golang/github.com/alibabacloud-go/debug@v1.0.1",
        "pkg:golang/github.com/alibabacloud-go/tea@v1.4.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/gopkg.in/ini.v1@v1.67.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/alibabacloud-go/openapi-util@v0.1.2",
      "dependsOn": [
        "pkg:golang/github.com/alibabacloud-go/tea-utils/v2@v2.0.9",
        "pkg:golang/github.com/alibabacloud-go/tea@v1.4.0",
        "pkg:golang/github.com/tjfoc/gmsm@v1.4.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/tjfoc/gmsm@v1.4.1",
      "dependsOn": [
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/golang.org/x/net@v0.52.0",
        "pkg:golang/google.golang.org/grpc@v1.80.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/alibabacloud-go/tea-utils@v1.4.5",
      "dependsOn": [
        "pkg:golang/github.com/alibabacloud-go/tea@v1.4.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/alibabacloud-go/tea-xml@v1.1.3",
      "dependsOn": [
        "pkg:golang/github.com/alibabacloud-go/tea@v1.4.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/alibabacloud-go/endpoint-util@v1.1.1",
      "dependsOn": [
        "pkg:golang/github.com/alibabacloud-go/tea@v1.4.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/alibabacloud-go/cr-20181201@v1.0.10",
      "dependsOn": [
        "pkg:golang/github.com/alibabacloud-go/openapi-util@v0.1.2",
        "pkg:golang/github.com/alibabacloud-go/tea-utils@v1.4.5",
        "pkg:golang/github.com/alibabacloud-go/tea@v1.4.0",
        "pkg:golang/github.com/alibabacloud-go/darabonba-openapi@v0.2.1",
        "pkg:golang/github.com/alibabacloud-go/endpoint-util@v1.1.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/aliyuncontainerservice/ack-ram-tool/pkg/credentials/provider@v0.20.0",
      "dependsOn": [
        "pkg:golang/github.com/aliyun/credentials-go@v1.4.12",
        "pkg:golang/github.com/aliyuncontainerservice/ack-ram-tool/pkg/ecsmetadata@v0.0.10",
        "pkg:golang/golang.org/x/sync@v0.20.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/aliyuncontainerservice/ack-ram-tool/pkg/ecsmetadata@v0.0.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/sigstore/fulcio@v1.8.5",
      "dependsOn": [
        "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/github.com/thalesignite/crypto11@v1.2.5",
        "pkg:golang/github.com/spf13/cobra@v1.10.2",
        "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4",
        "pkg:golang/github.com/coreos/go-oidc/v3@v3.18.0",
        "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.28.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/fsnotify/fsnotify@v1.9.0",
        "pkg:golang/google.golang.org/api@v0.275.0",
        "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2",
        "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1",
        "pkg:golang/github.com/google/certificate-transparency-go@v1.3.3",
        "pkg:golang/github.com/magiconair/properties@v1.8.10",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/github.com/sigstore/sigstore@v1.10.5",
        "pkg:golang/github.com/spf13/viper@v1.21.0",
        "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
        "pkg:golang/go.step.sm/crypto@v0.77.2",
        "pkg:golang/sigs.k8s.io/release-utils@v0.12.4",
        "pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7",
        "pkg:golang/go.uber.org/zap@v1.27.1",
        "pkg:golang/github.com/spf13/pflag@v1.0.10",
        "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.6.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/coreos/go-oidc/v3@v3.18.0",
      "dependsOn": [
        "pkg:golang/golang.org/x/oauth2@v0.36.0",
        "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4"
      ]
    },
    {
      "ref": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1",
      "dependsOn": [
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260406210006-6f92a3bedf2d"
      ]
    },
    {
      "ref": "pkg:golang/github.com/sigstore/sigstore@v1.10.5",
      "dependsOn": [
        "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.10.0",
        "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0",
        "pkg:golang/golang.org/x/term@v0.41.0",
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4",
        "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1",
        "pkg:golang/golang.org/x/oauth2@v0.36.0",
        "pkg:golang/github.com/coreos/go-oidc/v3@v3.18.0",
        "pkg:golang/github.com/google/go-containerregistry@v0.21.4",
        "pkg:golang/github.com/letsencrypt/boulder@v0.20260406.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/letsencrypt/boulder@v0.20260406.0",
      "dependsOn": [
        "pkg:golang/golang.org/x/term@v0.41.0",
        "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4",
        "pkg:golang/github.com/aws/smithy-go@v1.24.3",
        "pkg:golang/github.com/google/certificate-transparency-go@v1.3.3",
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/github.com/titanous/rocacheck@v0.0.0-20171023193734-afe73141d399",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.99.0",
        "pkg:golang/golang.org/x/net@v0.52.0",
        "pkg:golang/github.com/go-sql-driver/mysql@v1.9.3",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.14",
        "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8",
        "pkg:golang/github.com/miekg/pkcs11@v1.1.2",
        "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.68.0",
        "pkg:golang/golang.org/x/text@v0.35.0",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
        "pkg:golang/github.com/go-logr/stdr@v1.2.2",
        "pkg:golang/golang.org/x/time@v0.15.0",
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.68.0",
        "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0",
        "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/titanous/rocacheck@v0.0.0-20171023193734-afe73141d399",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0",
      "dependsOn": [
        "pkg:golang/golang.org/x/term@v0.41.0",
        "pkg:golang/github.com/dustin/go-humanize@v1.0.1",
        "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.10.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/syndtr/goleveldb@v1.0.1-0.20220721030215-126854af5e6d",
        "pkg:golang/golang.org/x/crypto@v0.49.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/syndtr/goleveldb@v1.0.1-0.20220721030215-126854af5e6d",
      "dependsOn": [
        "pkg:golang/github.com/golang/snappy@v1.0.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/thalesignite/crypto11@v1.2.5",
      "dependsOn": [
        "pkg:golang/github.com/pkg/errors@v0.9.1",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/thales-e-security/pool@v0.0.2",
        "pkg:golang/github.com/miekg/pkcs11@v1.1.2"
      ]
    },
    {
      "ref": "pkg:golang/github.com/thales-e-security/pool@v0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/go.step.sm/crypto@v0.77.2",
      "dependsOn": [
        "pkg:golang/github.com/pkg/errors@v0.9.1",
        "pkg:golang/google.golang.org/api@v0.275.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/github.com/thalesignite/crypto11@v1.2.5",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.14",
        "pkg:golang/filippo.io/edwards25519@v1.2.0",
        "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.21.0",
        "pkg:golang/golang.org/x/sys@v0.42.0",
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/modernc.org/sqlite@v1.48.1",
        "pkg:golang/golang.org/x/net@v0.52.0",
        "pkg:golang/github.com/go-piv/piv-go/v2@v2.5.0",
        "pkg:golang/golang.org/x/term@v0.41.0",
        "pkg:golang/github.com/googleapis/gax-go/v2@v2.21.0"
      ]
    },
    {
      "ref": "pkg:golang/sigs.k8s.io/release-utils@v0.12.4",
      "dependsOn": [
        "pkg:golang/github.com/spf13/cobra@v1.10.2",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/k8s.io/utils@v0.0.0-20260319190234-28399d86e0b5",
        "pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20210622060536-734e95fb86be",
        "pkg:golang/github.com/moby/term@v0.5.2",
        "pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481",
        "pkg:golang/github.com/sirupsen/logrus@v1.9.4"
      ]
    },
    {
      "ref": "pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20210622060536-734e95fb86be",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/k8s.io/utils@v0.0.0-20260319190234-28399d86e0b5",
      "dependsOn": [
        "pkg:golang/k8s.io/klog/v2@v2.140.0",
        "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc"
      ]
    },
    {
      "ref": "pkg:golang/github.com/sigstore/rekor-tiles/v2@v2.2.1",
      "dependsOn": [
        "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.10.0",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
        "pkg:golang/cloud.google.com/go/spanner@v1.89.0",
        "pkg:golang/github.com/sigstore/sigstore-go@v1.1.4",
        "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.5",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.14",
        "pkg:golang/golang.org/x/sync@v0.20.0",
        "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.28.0",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.14",
        "pkg:golang/go.step.sm/crypto@v0.77.2",
        "pkg:golang/github.com/sigstore/sigstore@v1.10.5",
        "pkg:golang/github.com/aws/smithy-go@v1.24.3",
        "pkg:golang/sigs.k8s.io/release-utils@v0.12.4",
        "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1",
        "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467",
        "pkg:golang/golang.org/x/exp@v0.0.0-20260312153236-7ab1446f8b90",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/github.com/transparency-dev/formats@v0.1.0",
        "pkg:golang/cloud.google.com/go/storage@v1.59.2",
        "pkg:golang/golang.org/x/mod@v0.34.0",
        "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/github.com/transparency-dev/merkle@v0.0.2",
        "pkg:golang/k8s.io/klog/v2@v2.140.0",
        "pkg:golang/github.com/spf13/viper@v1.21.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/spf13/cobra@v1.10.2",
        "pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.99.0",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.43.0",
        "pkg:golang/google.golang.org/api@v0.275.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/sigstore/sigstore-go@v1.1.4",
      "dependsOn": [
        "pkg:golang/github.com/in-toto/attestation@v1.2.0",
        "pkg:golang/github.com/sigstore/rekor@v1.5.1",
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20250524132541-c45532741eea",
        "pkg:golang/github.com/in-toto/in-toto-golang@v0.10.0",
        "pkg:golang/github.com/sigstore/rekor-tiles/v2@v2.2.1",
        "pkg:golang/github.com/go-openapi/runtime@v0.29.3",
        "pkg:golang/github.com/sigstore/sigstore@v1.10.5",
        "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/golang.org/x/mod@v0.34.0",
        "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.10.0",
        "pkg:golang/github.com/google/certificate-transparency-go@v1.3.3",
        "pkg:golang/github.com/sigstore/timestamp-authority/v2@v2.0.5",
        "pkg:golang/github.com/go-openapi/swag/conv@v0.25.5",
        "pkg:golang/github.com/theupdateframework/go-tuf/v2@v2.4.1",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/github.com/go-openapi/strfmt@v0.26.1",
        "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467"
      ]
    },
    {
      "ref": "pkg:golang/github.com/sigstore/rekor@v1.5.1",
      "dependsOn": [
        "pkg:golang/github.com/go-openapi/spec@v0.22.4",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.10.0",
        "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0",
        "pkg:golang/golang.org/x/sync@v0.20.0",
        "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/github.com/go-sql-driver/mysql@v1.9.3",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8",
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/google.golang.org/api@v0.275.0",
        "pkg:golang/cloud.google.com/go/iam@v1.7.0",
        "pkg:golang/github.com/go-openapi/runtime@v0.29.3",
        "pkg:golang/github.com/go-openapi/validate@v0.25.2",
        "pkg:golang/github.com/sassoftware/relic@v7.2.1+incompatible",
        "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2",
        "pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20241212093149-d2f9f49435c7",
        "pkg:golang/github.com/spf13/cobra@v1.10.2",
        "pkg:golang/gopkg.in/ini.v1@v1.67.1",
        "pkg:golang/go.step.sm/crypto@v0.77.2",
        "pkg:golang/github.com/go-openapi/errors@v0.22.7",
        "pkg:golang/github.com/in-toto/in-toto-golang@v0.10.0",
        "pkg:golang/github.com/go-openapi/swag/conv@v0.25.5",
        "pkg:golang/go.uber.org/zap@v1.27.1",
        "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/go-openapi/strfmt@v0.26.1",
        "pkg:golang/sigs.k8s.io/yaml@v1.6.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/github.com/blang/semver@v3.5.1+incompatible",
        "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2",
        "pkg:golang/github.com/go-openapi/loads@v0.23.3",
        "pkg:golang/github.com/transparency-dev/merkle@v0.0.2",
        "pkg:golang/github.com/spf13/pflag@v1.0.10",
        "pkg:golang/github.com/go-chi/chi/v5@v5.2.5",
        "pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0",
        "pkg:golang/github.com/sigstore/sigstore@v1.10.5",
        "pkg:golang/golang.org/x/mod@v0.34.0",
        "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1",
        "pkg:golang/github.com/go-openapi/swag@v0.25.5",
        "pkg:golang/golang.org/x/net@v0.52.0",
        "pkg:golang/github.com/spf13/viper@v1.21.0",
        "pkg:golang/gopkg.in/yaml.v2@v2.4.0",
        "pkg:golang/sigs.k8s.io/release-utils@v0.12.4"
      ]
    },
    {
      "ref": "pkg:golang/github.com/blang/semver@v3.5.1+incompatible",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20241212093149-d2f9f49435c7",
      "dependsOn": [
        "pkg:golang/golang.org/x/crypto@v0.49.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/sassoftware/relic@v7.2.1+incompatible",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/gopkg.in/yaml.v2@v2.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/sigstore/timestamp-authority/v2@v2.0.5",
      "dependsOn": [
        "pkg:golang/github.com/go-chi/chi/v5@v5.2.5",
        "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20250730155240-ffadbf3f398c",
        "pkg:golang/github.com/go-openapi/strfmt@v0.26.1",
        "pkg:golang/github.com/go-openapi/spec@v0.22.4",
        "pkg:golang/github.com/spf13/viper@v1.21.0",
        "pkg:golang/github.com/pkg/errors@v0.9.1",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/github.com/go-openapi/swag@v0.25.5",
        "pkg:golang/go.step.sm/crypto@v0.77.2",
        "pkg:golang/sigs.k8s.io/release-utils@v0.12.4",
        "pkg:golang/github.com/mitchellh/mapstructure@v1.5.1-0.20231216201459-8508981c8b6c",
        "pkg:golang/golang.org/x/net@v0.52.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/go.uber.org/zap@v1.27.1",
        "pkg:golang/sigs.k8s.io/yaml@v1.6.0",
        "pkg:golang/github.com/go-openapi/loads@v0.23.3",
        "pkg:golang/github.com/spf13/pflag@v1.0.10",
        "pkg:golang/github.com/go-openapi/runtime@v0.29.3",
        "pkg:golang/github.com/go-openapi/errors@v0.22.7",
        "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20250524132541-c45532741eea",
        "pkg:golang/github.com/go-playground/validator/v10@v10.30.2",
        "pkg:golang/github.com/spf13/cobra@v1.10.2",
        "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0",
        "pkg:golang/github.com/sigstore/sigstore@v1.10.5"
      ]
    },
    {
      "ref": "pkg:golang/github.com/theupdateframework/go-tuf/v2@v2.4.1",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3",
        "pkg:golang/github.com/go-logr/stdr@v1.2.2",
        "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.10.0",
        "pkg:golang/github.com/sigstore/sigstore@v1.10.5",
        "pkg:golang/github.com/spf13/cobra@v1.10.2"
      ]
    },
    {
      "ref": "pkg:golang/github.com/transparency-dev/formats@v0.1.0",
      "dependsOn": [
        "pkg:golang/golang.org/x/mod@v0.34.0",
        "pkg:golang/github.com/google/go-cmp@v0.7.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/withfig/autocomplete-tools/integrations/cobra@v1.2.1",
      "dependsOn": [
        "pkg:golang/github.com/spf13/pflag@v1.0.10",
        "pkg:golang/github.com/spf13/cobra@v1.10.2"
      ]
    },
    {
      "ref": "pkg:golang/gitlab.com/gitlab-org/api/client-go@v1.46.0",
      "dependsOn": [
        "pkg:golang/github.com/google/go-querystring@v1.2.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/zalando/go-keyring@v0.2.8",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/golang.org/x/oauth2@v0.36.0",
        "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2",
        "pkg:golang/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go@v1.36.11-20260209202127-80ab13bee0bf.1",
        "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8",
        "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
        "pkg:golang/golang.org/x/time@v0.15.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/zalando/go-keyring@v0.2.8",
      "dependsOn": [
        "pkg:golang/github.com/danieljoos/wincred@v1.2.3",
        "pkg:golang/github.com/godbus/dbus/v5@v5.2.2"
      ]
    },
    {
      "ref": "pkg:golang/github.com/godbus/dbus/v5@v5.2.2",
      "dependsOn": [
        "pkg:golang/golang.org/x/sys@v0.42.0"
      ]
    },
    {
      "ref": "pkg:golang/k8s.io/api@v0.35.3",
      "dependsOn": [
        "pkg:golang/k8s.io/apimachinery@v0.35.3",
        "pkg:golang/k8s.io/klog/v2@v2.140.0"
      ]
    },
    {
      "ref": "pkg:golang/k8s.io/apimachinery@v0.35.3",
      "dependsOn": [
        "pkg:golang/github.com/google/uuid@v1.6.0",
        "pkg:golang/k8s.io/utils@v0.0.0-20260319190234-28399d86e0b5",
        "pkg:golang/gopkg.in/inf.v0@v0.9.1",
        "pkg:golang/golang.org/x/time@v0.15.0",
        "pkg:golang/golang.org/x/net@v0.52.0",
        "pkg:golang/k8s.io/klog/v2@v2.140.0",
        "pkg:golang/sigs.k8s.io/randfill@v1.0.0",
        "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0",
        "pkg:golang/github.com/spf13/pflag@v1.0.10",
        "pkg:golang/k8s.io/kube-openapi@v0.0.0-20260330154417-16be699c7b31",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.2",
        "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2",
        "pkg:golang/github.com/google/gnostic-models@v0.7.1",
        "pkg:golang/sigs.k8s.io/yaml@v1.6.0",
        "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.1",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc",
        "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730"
      ]
    },
    {
      "ref": "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.1",
      "dependsOn": [
        "pkg:golang/github.com/x448/float16@v0.8.4"
      ]
    },
    {
      "ref": "pkg:golang/github.com/x448/float16@v0.8.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/google/gnostic-models@v0.7.1",
      "dependsOn": [
        "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
        "pkg:golang/google.golang.org/protobuf@v1.36.11"
      ]
    },
    {
      "ref": "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20260330154417-16be699c7b31",
      "dependsOn": [
        "pkg:golang/sigs.k8s.io/yaml@v1.6.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/spf13/pflag@v1.0.10",
        "pkg:golang/github.com/go-openapi/jsonreference@v0.21.5",
        "pkg:golang/github.com/go-openapi/swag@v0.25.5",
        "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/go.yaml.in/yaml/v2@v2.4.4",
        "pkg:golang/sigs.k8s.io/randfill@v1.0.0",
        "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822",
        "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
        "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/k8s.io/klog/v2@v2.140.0",
        "pkg:golang/github.com/google/gnostic-models@v0.7.1",
        "pkg:golang/golang.org/x/tools@v0.43.0",
        "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.2",
        "pkg:golang/github.com/google/uuid@v1.6.0",
        "pkg:golang/k8s.io/utils@v0.0.0-20260319190234-28399d86e0b5"
      ]
    },
    {
      "ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.2",
      "dependsOn": [
        "pkg:golang/github.com/json-iterator/go@v1.1.12",
        "pkg:golang/go.yaml.in/yaml/v2@v2.4.4",
        "pkg:golang/sigs.k8s.io/randfill@v1.0.0",
        "pkg:golang/github.com/google/go-cmp@v0.7.0"
      ]
    },
    {
      "ref": "pkg:golang/k8s.io/client-go@v0.35.3",
      "dependsOn": [
        "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730",
        "pkg:golang/github.com/go-logr/logr@v1.4.3",
        "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0",
        "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "pkg:golang/k8s.io/klog/v2@v2.140.0",
        "pkg:golang/k8s.io/api@v0.35.3",
        "pkg:golang/github.com/google/uuid@v1.6.0",
        "pkg:golang/golang.org/x/net@v0.52.0",
        "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.2",
        "pkg:golang/sigs.k8s.io/yaml@v1.6.0",
        "pkg:golang/github.com/spf13/pflag@v1.0.10",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/k8s.io/utils@v0.0.0-20260319190234-28399d86e0b5",
        "pkg:golang/sigs.k8s.io/randfill@v1.0.0",
        "pkg:golang/k8s.io/apimachinery@v0.35.3",
        "pkg:golang/golang.org/x/oauth2@v0.36.0",
        "pkg:golang/golang.org/x/term@v0.41.0",
        "pkg:golang/k8s.io/kube-openapi@v0.0.0-20260330154417-16be699c7b31",
        "pkg:golang/github.com/google/gnostic-models@v0.7.1",
        "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822",
        "pkg:golang/golang.org/x/time@v0.15.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/gopkg.in/go-jose/go-jose.v2@v2.6.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/joho/godotenv@v1.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/knqyf263/go-apk-version@v0.0.0-20200609155635-041fdbb8563f",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/knqyf263/go-deb-version@v0.0.0-20241115132648-6f4aee6ccd23",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/knqyf263/go-rpm-version@v0.0.0-20240918084003-2afd7dc6a38f",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/labstack/echo/v4@v4.15.1",
      "dependsOn": [
        "pkg:golang/golang.org/x/time@v0.15.0",
        "pkg:golang/github.com/labstack/gommon@v0.4.2",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/valyala/fasttemplate@v1.2.2",
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/golang.org/x/net@v0.52.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/labstack/gommon@v0.4.2",
      "dependsOn": [
        "pkg:golang/github.com/mattn/go-isatty@v0.0.20",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/github.com/valyala/fasttemplate@v1.2.2",
        "pkg:golang/github.com/mattn/go-colorable@v0.1.14"
      ]
    },
    {
      "ref": "pkg:golang/github.com/valyala/fasttemplate@v1.2.2",
      "dependsOn": [
        "pkg:golang/github.com/valyala/bytebufferpool@v1.0.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/valyala/bytebufferpool@v1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/lmittmann/tint@v1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/mitchellh/colorstring@v0.0.0-20190213212951-d06e56a500db",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/ory/client-go@v1.22.9",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/golang.org/x/oauth2@v0.36.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/pandatix/go-cvss@v0.6.2",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/protonmail/gopenpgp/v3@v3.4.0",
      "dependsOn": [
        "pkg:golang/github.com/protonmail/go-crypto@v1.4.1",
        "pkg:golang/github.com/protonmail/go-mime@v0.0.0-20230322103455-7d82a3887f2f",
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/github.com/rivo/uniseg@v0.4.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/schollz/progressbar/v3@v3.19.0",
      "dependsOn": [
        "pkg:golang/github.com/mitchellh/colorstring@v0.0.0-20190213212951-d06e56a500db",
        "pkg:golang/github.com/rivo/uniseg@v0.4.7",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/golang.org/x/term@v0.41.0"
      ]
    },
    {
      "ref": "pkg:golang/github.com/ulikunitz/xz@v0.5.15",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/github.com/yaronf/httpsign@v0.5.1",
      "dependsOn": [
        "pkg:golang/github.com/dunglas/httpsfv@v1.1.0",
        "pkg:golang/github.com/lestrrat-go/jwx/v2@v2.1.6",
        "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.0.13",
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho@v0.68.0",
      "dependsOn": [
        "pkg:golang/github.com/labstack/echo/v4@v4.15.1",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/go.opentelemetry.io/otel/metric@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0"
      ]
    },
    {
      "ref": "pkg:golang/go.opentelemetry.io/otel/exporters/stdout/stdouttrace@v1.43.0",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/go.opentelemetry.io/otel/metric@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0"
      ]
    },
    {
      "ref": "pkg:golang/go.uber.org/dig@v1.19.0",
      "dependsOn": [
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/go.uber.org/fx@v1.24.0",
      "dependsOn": [
        "pkg:golang/go.uber.org/dig@v1.19.0",
        "pkg:golang/go.uber.org/multierr@v1.11.0",
        "pkg:golang/go.uber.org/zap@v1.27.1",
        "pkg:golang/golang.org/x/sys@v0.42.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1"
      ]
    },
    {
      "ref": "pkg:golang/gorm.io/datatypes@v1.2.7",
      "dependsOn": [
        "pkg:golang/gorm.io/driver/mysql@v1.6.0",
        "pkg:golang/gorm.io/driver/postgres@v1.6.0",
        "pkg:golang/gorm.io/driver/sqlserver@v1.6.3",
        "pkg:golang/gorm.io/gorm@v1.31.1",
        "pkg:golang/github.com/google/uuid@v1.6.0",
        "pkg:golang/github.com/jinzhu/now@v1.1.5"
      ]
    },
    {
      "ref": "pkg:golang/gorm.io/driver/clickhouse@v0.7.0",
      "dependsOn": [
        "pkg:golang/gorm.io/gorm@v1.31.1",
        "pkg:golang/github.com/clickhouse/clickhouse-go/v2@v2.44.0",
        "pkg:golang/github.com/hashicorp/go-version@v1.9.0"
      ]
    },
    {
      "ref": "pkg:golang/gorm.io/plugin/opentelemetry@v0.1.16",
      "dependsOn": [
        "pkg:golang/gorm.io/driver/clickhouse@v0.7.0",
        "pkg:golang/gorm.io/gorm@v1.31.1",
        "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/exporters/stdout/stdouttrace@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
        "pkg:golang/gorm.io/driver/mysql@v1.6.0",
        "pkg:golang/github.com/sirupsen/logrus@v1.9.4",
        "pkg:golang/go.opentelemetry.io/otel/metric@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0",
        "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "pkg:golang/gorm.io/driver/postgres@v1.6.0"
      ]
    },
    {
      "ref": "pkg:golang/pault.ag/go/debian@v0.19.0",
      "dependsOn": [
        "pkg:golang/github.com/klauspost/compress@v1.18.5",
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/pault.ag/go/topsort@v0.1.1"
      ]
    },
    {
      "ref": "pkg:golang/pault.ag/go/topsort@v0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:golang/stdlib@v1.26.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:oci/devguard@main?arch=amd64&repository_url=ghcr.io%2Fl3montree-dev%2Fdevguard&tag=main-amd64",
      "dependsOn": [
        "pkg:golang/github.com/clickhouse/ch-go@v0.71.0",
        "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.13",
        "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3",
        "pkg:golang/github.com/go-faster/errors@v0.7.1",
        "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.5",
        "pkg:golang/github.com/jinzhu/now@v1.1.5",
        "pkg:golang/github.com/gobwas/glob@v0.2.3",
        "pkg:golang/golang.org/x/crypto@v0.49.0",
        "pkg:golang/github.com/golang-migrate/migrate/v4@v4.19.1",
        "pkg:golang/golang.org/x/term@v0.41.0",
        "pkg:golang/github.com/google/uuid@v1.6.0",
        "pkg:golang/github.com/glebarez/go-sqlite@v1.22.0",
        "pkg:golang/github.com/spf13/pflag@v1.0.10",
        "pkg:golang/github.com/google/licensecheck@v0.3.1",
        "pkg:golang/github.com/casbin/govaluate@v1.10.0",
        "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3",
        "pkg:golang/github.com/go-playground/universal-translator@v0.18.1",
        "pkg:golang/github.com/in-toto/attestation@v1.2.0",
        "pkg:golang/go.uber.org/zap@v1.27.1",
        "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.32",
        "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415",
        "pkg:golang/golang.org/x/sys@v0.42.0",
        "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/github.com/sigstore/sigstore@v1.10.5",
        "pkg:golang/github.com/gocsaf/csaf/v3@v3.5.1",
        "pkg:golang/oras.land/oras-go/v2@v2.6.0",
        "pkg:golang/modernc.org/sqlite@v1.48.1",
        "pkg:golang/google.golang.org/grpc@v1.80.0",
        "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "pkg:golang/github.com/segmentio/asm@v1.2.1",
        "pkg:golang/github.com/emirpasic/gods@v1.18.1",
        "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
        "pkg:golang/gorm.io/gorm@v1.31.1",
        "pkg:golang/github.com/labstack/gommon@v0.4.2",
        "pkg:golang/github.com/shopspring/decimal@v1.4.0",
        "pkg:golang/github.com/rivo/uniseg@v0.4.7",
        "pkg:golang/github.com/klauspost/cpuid/v2@v2.3.0",
        "pkg:golang/github.com/felixge/httpsnoop@v1.0.4",
        "pkg:golang/github.com/spf13/cobra@v1.10.2",
        "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.43.0",
        "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260406210006-6f92a3bedf2d",
        "pkg:golang/golang.org/x/exp@v0.0.0-20260312153236-7ab1446f8b90",
        "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.68.0",
        "pkg:golang/github.com/skeema/knownhosts@v1.3.2",
        "pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec",
        "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1",
        "pkg:golang/github.com/jackc/puddle/v2@v2.2.2",
        "pkg:golang/github.com/pjbgf/sha1cd@v0.5.0",
        "pkg:golang/github.com/lestrrat-go/jwx/v2@v2.1.6",
        "pkg:golang/github.com/getsentry/sentry-go@v0.44.1",
        "pkg:golang/go.uber.org/multierr@v1.11.0",
        "pkg:golang/gitlab.com/gitlab-org/api/client-go@v1.46.0",
        "pkg:golang/github.com/leodido/go-urn@v1.4.0",
        "pkg:golang/github.com/go-playground/validator/v10@v10.30.2",
        "pkg:golang/github.com/yaronf/httpsign@v0.5.1",
        "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9",
        "pkg:golang/github.com/mitchellh/colorstring@v0.0.0-20190213212951-d06e56a500db",
        "pkg:golang/github.com/knqyf263/go-apk-version@v0.0.0-20200609155635-041fdbb8563f",
        "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1",
        "pkg:golang/gorm.io/driver/sqlserver@v1.6.3",
        "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4",
        "pkg:golang/github.com/casbin/gorm-adapter/v3@v3.41.0",
        "pkg:golang/golang.org/x/sync@v0.20.0",
        "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
        "pkg:golang/github.com/go-faster/city@v1.0.1",
        "pkg:golang/gopkg.in/warnings.v0@v0.1.2",
        "pkg:golang/github.com/valyala/fastjson@v1.6.10",
        "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.28.0",
        "pkg:golang/github.com/jackc/pgservicefile@v0.0.0-20240606120523-5a60cdf6a761",
        "pkg:golang/github.com/valyala/bytebufferpool@v1.0.0",
        "pkg:golang/gorm.io/plugin/dbresolver@v1.6.2",
        "pkg:golang/golang.org/x/text@v0.35.0",
        "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.43.0",
        "pkg:golang/go.opentelemetry.io/otel/exporters/stdout/stdouttrace@v1.43.0",
        "pkg:golang/filippo.io/edwards25519@v1.2.0",
        "pkg:golang/github.com/hashicorp/go-version@v1.9.0",
        "pkg:golang/github.com/google/go-containerregistry@v0.21.4",
        "pkg:golang/github.com/knqyf263/go-deb-version@v0.0.0-20241115132648-6f4aee6ccd23",
        "pkg:golang/stdlib@v1.26.1",
        "pkg:golang/github.com/protonmail/go-mime@v0.0.0-20230322103455-7d82a3887f2f",
        "pkg:golang/github.com/schollz/progressbar/v3@v3.19.0",
        "pkg:golang/github.com/google/go-github/v62@v62.0.0",
        "pkg:golang/go.uber.org/dig@v1.19.0",
        "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0",
        "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376",
        "pkg:golang/pault.ag/go/topsort@v0.1.1",
        "pkg:golang/github.com/lestrrat-go/httprc@v1.0.6",
        "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0",
        "pkg:golang/github.com/lestrrat-go/iter@v1.0.2",
        "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb",
        "pkg:golang/github.com/lmittmann/tint@v1.1.3",
        "pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.2",
        "pkg:golang/go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho@v0.68.0",
        "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99",
        "pkg:golang/github.com/ory/client-go@v1.22.9",
        "pkg:golang/dario.cat/mergo@v1.0.2",
        "pkg:golang/go.yaml.in/yaml/v2@v2.4.4",
        "pkg:golang/github.com/package-url/packageurl-go@v0.1.5",
        "pkg:golang/github.com/cloudflare/circl@v1.6.3",
        "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0",
        "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0",
        "pkg:golang/golang.org/x/time@v0.15.0",
        "pkg:golang/go.opentelemetry.io/otel/metric@v1.43.0",
        "pkg:golang/github.com/gosimple/unidecode@v1.0.1",
        "pkg:golang/github.com/pierrec/lz4/v4@v4.1.26",
        "pkg:golang/github.com/sirupsen/logrus@v1.9.4",
        "pkg:golang/github.com/google/go-github/v84@v84.0.0",
        "pkg:golang/github.com/agnivade/levenshtein@v1.2.1",
        "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
        "pkg:golang/github.com/dustin/go-humanize@v1.0.1",
        "pkg:golang/github.com/dunglas/httpsfv@v1.1.0",
        "pkg:golang/github.com/protonmail/gopenpgp/v3@v3.4.0",
        "pkg:golang/github.com/andybalholm/brotli@v1.2.1",
        "pkg:golang/gorm.io/plugin/opentelemetry@v0.1.16",
        "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3",
        "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
        "pkg:golang/github.com/protonmail/gopenpgp/v2@v2.10.0",
        "pkg:golang/github.com/labstack/echo/v4@v4.15.1",
        "pkg:golang/github.com/go-sql-driver/mysql@v1.9.3",
        "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2",
        "pkg:golang/github.com/glebarez/sqlite@v1.11.0",
        "pkg:golang/github.com/go-git/go-git/v5@v5.17.2",
        "pkg:golang/github.com/go-logr/stdr@v1.2.2",
        "pkg:golang/github.com/lestrrat-go/dsig@v1.2.1",
        "pkg:golang/go.uber.org/fx@v1.24.0",
        "pkg:golang/github.com/gosimple/slug@v1.15.0",
        "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0",
        "pkg:golang/modernc.org/memory@v1.11.0",
        "pkg:golang/github.com/golang-sql/sqlexp@v0.1.0",
        "pkg:golang/github.com/jackc/pgpassfile@v1.0.0",
        "pkg:golang/gorm.io/datatypes@v1.2.7",
        "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2",
        "pkg:golang/github.com/open-policy-agent/opa@v1.15.1",
        "pkg:golang/github.com/google/go-querystring@v1.2.0",
        "pkg:golang/gorm.io/driver/clickhouse@v0.7.0",
        "pkg:golang/golang.org/x/mod@v0.34.0",
        "pkg:golang/github.com/paulmach/orb@v0.13.0",
        "pkg:golang/go.opentelemetry.io/proto/otlp@v1.10.0",
        "pkg:golang/github.com/klauspost/compress@v1.18.5",
        "pkg:golang/github.com/protonmail/go-crypto@v1.4.1",
        "pkg:golang/github.com/pandatix/go-cvss@v0.6.2",
        "pkg:golang/github.com/go-logr/logr@v1.4.3",
        "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0",
        "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8",
        "pkg:golang/github.com/joho/godotenv@v1.5.1",
        "pkg:golang/github.com/valyala/fasttemplate@v1.2.2",
        "pkg:golang/github.com/pkg/errors@v0.9.1",
        "pkg:golang/github.com/clickhouse/clickhouse-go/v2@v2.44.0",
        "pkg:golang/github.com/bradleyfalzon/ghinstallation/v2@v2.18.0",
        "pkg:golang/github.com/kevinburke/ssh_config@v1.6.0",
        "pkg:golang/github.com/lib/pq@v1.12.3",
        "pkg:golang/modernc.org/libc@v1.70.0",
        "pkg:golang/pault.ag/go/debian@v0.19.0",
        "pkg:golang/github.com/go-playground/locales@v0.14.1",
        "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.10.0",
        "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.0.13",
        "pkg:golang/github.com/intevation/gval@v1.3.0",
        "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1",
        "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
        "pkg:golang/github.com/in-toto/go-witness@v0.9.2",
        "pkg:golang/github.com/intevation/jsonpath@v0.2.1",
        "pkg:golang/github.com/go-git/go-billy/v5@v5.8.0",
        "pkg:golang/github.com/bmatcuk/doublestar/v4@v4.10.0",
        "pkg:golang/go.etcd.io/bbolt@v1.4.3",
        "pkg:golang/github.com/casbin/casbin/v2@v2.135.0",
        "pkg:golang/sigs.k8s.io/yaml@v1.6.0",
        "pkg:golang/github.com/jackc/pgx/v5@v5.9.1",
        "pkg:golang/github.com/in-toto/in-toto-golang@v0.10.0",
        "pkg:golang/github.com/casbin/casbin/v3@v3.10.0",
        "pkg:golang/github.com/sergi/go-diff@v1.4.0",
        "pkg:golang/github.com/golang-sql/civil@v0.0.0-20220223132316-b832511892a9",
        "pkg:golang/github.com/knqyf263/go-rpm-version@v0.0.0-20240918084003-2afd7dc6a38f",
        "pkg:golang/go.yaml.in/yaml/v3@v3.0.4",
        "pkg:golang/github.com/openvex/go-vex@v0.2.8",
        "pkg:golang/golang.org/x/oauth2@v0.36.0",
        "pkg:golang/github.com/cyclonedx/cyclonedx-go@v0.10.0",
        "pkg:golang/gorm.io/driver/mysql@v1.6.0",
        "pkg:golang/gorm.io/driver/postgres@v1.6.0",
        "pkg:golang/github.com/hashicorp/golang-lru/v2@v2.0.7",
        "pkg:golang/modernc.org/mathutil@v1.7.1",
        "pkg:golang/github.com/cyphar/filepath-securejoin@v0.6.1",
        "pkg:golang/github.com/jinzhu/inflection@v1.0.0",
        "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8",
        "pkg:golang/github.com/mattn/go-colorable@v0.1.14",
        "pkg:golang/github.com/exaring/otelpgx@v0.10.0",
        "pkg:golang/github.com/mattn/go-isatty@v0.0.20",
        "pkg:golang/golang.org/x/net@v0.52.0",
        "pkg:golang/github.com/lestrrat-go/option@v1.0.1",
        "pkg:golang/github.com/microsoft/go-mssqldb@v1.9.8",
        "pkg:golang/github.com/ulikunitz/xz@v0.5.15",
        "pkg:golang/gopkg.in/yaml.v2@v2.4.0"
      ]
    }
  ],
  "vulnerabilities": []
}
