{ "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.5", "serialNumber": "urn:uuid:0920aa2e-b057-4aa9-a4b8-3bebd0b08c5c", "version": 1, "metadata": { "timestamp": "2026-08-26T19:32:36Z", "tools": { "components": [ { "type": "application", "author": "anchore", "name": "syft", "version": "1.51.0" } ] }, "component": { "bom-ref": "0694ab0cf77a29c5", "type": "container", "name": "/w/image.tar", "version": "sha256:2163954a5d8dd2fa5df4b2cbbe806b19da7bdedd322349471a2a047aca30e335" }, "properties": [ { "name": "syft:image:labels:io.buildah.version", "value": "1.43.2" }, { "name": "syft:image:labels:org.opencontainers.image.description", "value": "Container signing, verification and storage in an OCI registry" }, { "name": "syft:image:labels:org.opencontainers.image.source", "value": "https://index.kapsl.sh" }, { "name": "syft:image:labels:org.opencontainers.image.title", "value": "cosign" }, { "name": "syft:image:labels:org.opencontainers.image.vendor", "value": "kapsl" }, { "name": "syft:image:labels:org.opencontainers.image.version", "value": "3.1.3" }, { "name": "syft:image:labels:sh.kapsl.prefix", "value": "/kapsl/dist/cosign-3.1.3" }, { "name": "syft:image:labels:sh.kapsl.project", "value": "cosign" }, { "name": "syft:image:labels:sh.kapsl.source-url", "value": "https://github.com/sigstore/cosign" }, { "name": "syft:image:labels:sh.kapsl.version", "value": "3.1.3" } ] }, "components": [ { "bom-ref": "pkg:golang/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go@v1.36.11-20260415201107-50325440f8f2.1?package-id=af4cad2275b45808", "type": "library", "name": "buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go", "version": "v1.36.11-20260415201107-50325440f8f2.1", "cpe": "cpe:2.3:a:gen:go\\/bufbuild\\/protovalidate\\/protocolbuffers\\/go:v1.36.11-20260415201107-50325440f8f2.1:*:*:*:*:*:*:*", "purl": "pkg:golang/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go@v1.36.11-20260415201107-50325440f8f2.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:s6hzCXtND/ICdGPTMGk7C+/BFlr2Jg5GyH0NKf4XGXg=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/cloud.google.com/go/auth@v0.20.0?package-id=8acc457bdfabcd11", "type": "library", "name": "cloud.google.com/go/auth", "version": "v0.20.0", "cpe": "cpe:2.3:a:go:auth:v0.20.0:*:*:*:*:*:*:*", "purl": "pkg:golang/cloud.google.com/go/auth@v0.20.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:kXTssoVb4azsVDoUiF8KvxAqrsQcQtB53DcSgta74CA=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8?package-id=06491cc1ebe52099", "type": "library", "name": "cloud.google.com/go/auth/oauth2adapt", "version": "v0.2.8", "cpe": "cpe:2.3:a:go:auth\\/oauth2adapt:v0.2.8:*:*:*:*:*:*:*", "purl": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:keo8NaayQZ6wimpNSmW5OPc283g65QNIiLpZnkHRbnc=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0?package-id=1d413807968d638d", "type": "library", "name": "cloud.google.com/go/compute/metadata", "version": "v0.9.0", "cpe": "cpe:2.3:a:go:compute\\/metadata:v0.9.0:*:*:*:*:*:*:*", "purl": "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:pDUj4QMoPejqq20dK0Pg2N4yG9zIkYGdBtwLoEkH9Zs=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/cloud.google.com/go/iam@v1.11.0?package-id=a2b6a1c21749c2f9", "type": "library", "name": "cloud.google.com/go/iam", "version": "v1.11.0", "cpe": "cpe:2.3:a:go:iam:v1.11.0:*:*:*:*:*:*:*", "purl": "pkg:golang/cloud.google.com/go/iam@v1.11.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:KieQ9Pb+LLPak1O3Rv3GgCxhnmkYf7Xyh0P5HfF1jFM=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/cloud.google.com/go/kms@v1.31.0?package-id=c943cf024de14a73", "type": "library", "name": "cloud.google.com/go/kms", "version": "v1.31.0", "cpe": "cpe:2.3:a:go:kms:v1.31.0:*:*:*:*:*:*:*", "purl": "pkg:golang/cloud.google.com/go/kms@v1.31.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:LS8N92OxFDgOLg5NCo3OmbvjtQAIVT5gUHVLKIDHaFE=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/cloud.google.com/go/longrunning@v1.0.0?package-id=e832b793857df1ce", "type": "library", "name": "cloud.google.com/go/longrunning", "version": "v1.0.0", "cpe": "cpe:2.3:a:go:longrunning:v1.0.0:*:*:*:*:*:*:*", "purl": "pkg:golang/cloud.google.com/go/longrunning@v1.0.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:lwzWEYD8+NkYV7dhexOz6kmlvajZA70+bW/xMhRVVdY=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/connectrpc.com/connect@v1.20.0?package-id=4b819937d2b25c37", "type": "library", "name": "connectrpc.com/connect", "version": "v1.20.0", "purl": "pkg:golang/connectrpc.com/connect@v1.20.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:6TNDAB+WeNd2uolWNlYczB5E0KNNaVMNUEx8JEUsPmQ=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/cuelabs.dev/go/oci/ociregistry@v0.0.0-20251212221603-3adeb8663819?package-id=58fc3d33e7bf6653", "type": "library", "name": "cuelabs.dev/go/oci/ociregistry", "version": "v0.0.0-20251212221603-3adeb8663819", "cpe": "cpe:2.3:a:go:oci\\/ociregistry:v0.0.0-20251212221603-3adeb8663819:*:*:*:*:*:*:*", "purl": "pkg:golang/cuelabs.dev/go/oci/ociregistry@v0.0.0-20251212221603-3adeb8663819", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:Zh+Ur3OsoWpvALHPLT45nOekHkgOt+IOfutBbPqM17I=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/cuelang.org/go@v0.16.1?package-id=0508c18c4ef759af", "type": "library", "name": "cuelang.org/go", "version": "v0.16.1", "purl": "pkg:golang/cuelang.org/go@v0.16.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:iPN1lHZd2J0hjcr8hfq9PnIGk7VfPkKFfxH4de+m9sE=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/aliyuncontainerservice/ack-ram-tool/pkg/credentials/provider@v0.14.0?package-id=a090d7050612d7d3", "type": "library", "name": "github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/provider", "version": "v0.14.0", "cpe": "cpe:2.3:a:AliyunContainerService:ack-ram-tool\\/pkg\\/credentials\\/provider:v0.14.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/provider@v0.14.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:AliyunContainerService:ack_ram_tool\\/pkg\\/credentials\\/provider:v0.14.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:kcnfY4vljxXliXDBrA9K9lwF8IoEZ4Up6Eg9kWTIm28=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go@v68.0.0%2Bincompatible?package-id=3ebca22363ceb73f", "type": "library", "name": "github.com/Azure/azure-sdk-for-go", "version": "v68.0.0+incompatible", "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go:v68.0.0\\+incompatible:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go@v68.0.0%2Bincompatible", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:Azure:azure_sdk_for_go:v68.0.0\\+incompatible:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:fcYLmCpyNYRnvJbPerq7U0hS+6+I79yEDJBqVNcqUzU=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.22.0?package-id=956138b0fd188c99", "type": "library", "name": "github.com/Azure/azure-sdk-for-go/sdk/azcore", "version": "v1.22.0", "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/azcore:v1.22.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azcore@v1.22.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/azcore:v1.22.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:aokoqcHvaGjiM3VpjKDfMMnF/8epJ+Q1HLJ7CudztqE=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azidentity@v1.14.0?package-id=9e10b1e0b2fcd425", "type": "library", "name": "github.com/Azure/azure-sdk-for-go/sdk/azidentity", "version": "v1.14.0", "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/azidentity:v1.14.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.14.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/azidentity:v1.14.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:CU4+EJeJi3TKYWEcYuSdWsjzw0nVsK/H0MSQOiPcymU=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.12.0?package-id=52e7405110852c49", "type": "library", "name": "github.com/Azure/azure-sdk-for-go/sdk/internal", "version": "v1.12.0", "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/internal:v1.12.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/internal@v1.12.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/internal:v1.12.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:fhqpLE3UEXi9lPaBRpQ6XuRW0nU7hgg4zlmZZa+a9q4=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/security/keyvault/azkeys@v1.5.0?package-id=27c0d1e29f068fbe", "type": "library", "name": "github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys", "version": "v1.5.0", "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/security\\/keyvault\\/azkeys:v1.5.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys@v1.5.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/security\\/keyvault\\/azkeys:v1.5.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:MaKvxE6D0KkjOg6Wd9M00iqP5PR0kUxCfiezes4JweM=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/security/keyvault/internal@v1.2.0?package-id=3dccdceb0bdb3fff", "type": "library", "name": "github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal", "version": "v1.2.0", "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/security\\/keyvault\\/internal:v1.2.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal@v1.2.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/security\\/keyvault\\/internal:v1.2.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:nCYfgcSyHZXJI8J0IWE5MsCGlb2xp9fJiXyxWgmOFg4=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest@v0.11.29?package-id=d00814ba03c88556", "type": "library", "name": "github.com/Azure/go-autorest/autorest", "version": "v0.11.29", "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest:v0.11.29:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/Azure/go-autorest/autorest@v0.11.29", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:Azure:go_autorest\\/autorest:v0.11.29:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:I4+HL/JDvErx2LjyzaVxllw2lRDB5/BT2Bm4g20iqYw=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/adal@v0.9.23?package-id=de65619c4da8092f", "type": "library", "name": "github.com/Azure/go-autorest/autorest/adal", "version": "v0.9.23", "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest\\/adal:v0.9.23:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/adal@v0.9.23", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:Azure:go_autorest\\/autorest\\/adal:v0.9.23:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:Yepx8CvFxwNKpH6ja7RZ+sKX+DWYNldbLiALMC3BTz8=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/azure/auth@v0.5.12?package-id=7d51b47de7acff4b", "type": "library", "name": "github.com/Azure/go-autorest/autorest/azure/auth", "version": "v0.5.12", "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest\\/azure\\/auth:v0.5.12:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/azure/auth@v0.5.12", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:Azure:go_autorest\\/autorest\\/azure\\/auth:v0.5.12:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:wkAZRgT/pn8HhFyzfe9UnqOjJYqlembgCTi72Bm/xKk=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/azure/cli@v0.4.6?package-id=4294e98a585f85c3", "type": "library", "name": "github.com/Azure/go-autorest/autorest/azure/cli", "version": "v0.4.6", "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest\\/azure\\/cli:v0.4.6:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/azure/cli@v0.4.6", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:Azure:go_autorest\\/autorest\\/azure\\/cli:v0.4.6:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:w77/uPk80ZET2F+AfQExZyEWtn+0Rk/uw17m9fv5Ajc=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/azure/go-autorest/autorest/date@v0.3.0?package-id=0caab52d5270ace1", "type": "library", "name": "github.com/Azure/go-autorest/autorest/date", "version": "v0.3.0", "cpe": "cpe:2.3:a:Azure:go-autorest\\/autorest\\/date:v0.3.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/Azure/go-autorest/autorest/date@v0.3.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:Azure:go_autorest\\/autorest\\/date:v0.3.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:7gUk1U5M/CQbp9WoqinNzJar+8KY+LPI6wiWrP/myHw=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/azure/go-autorest/logger@v0.2.1?package-id=bb0e1f794f548df7", "type": "library", "name": "github.com/Azure/go-autorest/logger", "version": "v0.2.1", "cpe": "cpe:2.3:a:Azure:go-autorest\\/logger:v0.2.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/Azure/go-autorest/logger@v0.2.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:Azure:go_autorest\\/logger:v0.2.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:IG7i4p/mDa2Ce4TRyAO8IHnVhAVF3RFU+ZtXWSmf4Tg=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/azure/go-autorest/tracing@v0.6.0?package-id=43eec779f796250e", "type": "library", "name": "github.com/Azure/go-autorest/tracing", "version": "v0.6.0", "cpe": "cpe:2.3:a:Azure:go-autorest\\/tracing:v0.6.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/Azure/go-autorest/tracing@v0.6.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:Azure:go_autorest\\/tracing:v0.6.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:TYi4+3m5t6K48TGI9AUdb+IzbnSxvnvUMfuitfgcfuo=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/azuread/microsoft-authentication-library-for-go@v1.7.2?package-id=bf3c98b242e0c1d9", "type": "library", "name": "github.com/AzureAD/microsoft-authentication-library-for-go", "version": "v1.7.2", "cpe": "cpe:2.3:a:AzureAD:microsoft-authentication-library-for-go:v1.7.2:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/AzureAD/microsoft-authentication-library-for-go@v1.7.2", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:AzureAD:microsoft_authentication_library_for_go:v1.7.2:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:RHK7bS+HQMslb1sZpAokUt+zTVmue0hKSs2C791hhzU=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/agnivade/levenshtein@v1.2.1?package-id=ac95dc57dddfc9c1", "type": "library", "name": "github.com/agnivade/levenshtein", "version": "v1.2.1", "cpe": "cpe:2.3:a:agnivade:levenshtein:v1.2.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/agnivade/levenshtein@v1.2.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:EHBY3UOn1gwdy/VbFwgo4cxecRznFk7fKWN1KOX7eoM=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/alibabacloud-go/alibabacloud-gateway-spi@v0.0.4?package-id=e0865b67ab73492c", "type": "library", "name": "github.com/alibabacloud-go/alibabacloud-gateway-spi", "version": "v0.0.4", "cpe": "cpe:2.3:a:alibabacloud-go:alibabacloud-gateway-spi:v0.0.4:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/alibabacloud-go/alibabacloud-gateway-spi@v0.0.4", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud-go:alibabacloud_gateway_spi:v0.0.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud_go:alibabacloud-gateway-spi:v0.0.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud_go:alibabacloud_gateway_spi:v0.0.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud:alibabacloud-gateway-spi:v0.0.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud:alibabacloud_gateway_spi:v0.0.4:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:iC9YFYKDGEy3n/FtqJnOkZsene9olVspKmkX5A2YBEo=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/alibabacloud-go/cr-20160607@v1.0.1?package-id=0b8816b0db818409", "type": "library", "name": "github.com/alibabacloud-go/cr-20160607", "version": "v1.0.1", "cpe": "cpe:2.3:a:alibabacloud-go:cr-20160607:v1.0.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/alibabacloud-go/cr-20160607@v1.0.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud-go:cr_20160607:v1.0.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud_go:cr-20160607:v1.0.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud_go:cr_20160607:v1.0.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud:cr-20160607:v1.0.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud:cr_20160607:v1.0.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:WEnP1iPFKJU74ryUKh/YDPHoxMZawqlPajOymyNAkts=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/alibabacloud-go/cr-20181201@v1.0.10?package-id=76ce7a8169886d39", "type": "library", "name": "github.com/alibabacloud-go/cr-20181201", "version": "v1.0.10", "cpe": "cpe:2.3:a:alibabacloud-go:cr-20181201:v1.0.10:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/alibabacloud-go/cr-20181201@v1.0.10", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud-go:cr_20181201:v1.0.10:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud_go:cr-20181201:v1.0.10:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud_go:cr_20181201:v1.0.10:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud:cr-20181201:v1.0.10:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud:cr_20181201:v1.0.10:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:B60f6S1imsgn2fgC6X6FrVNrONDrbCT0NwYhsJ0C9/c=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/alibabacloud-go/darabonba-openapi@v0.2.1?package-id=c39e5a9ac94ba060", "type": "library", "name": "github.com/alibabacloud-go/darabonba-openapi", "version": "v0.2.1", "cpe": "cpe:2.3:a:alibabacloud-go:darabonba-openapi:v0.2.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/alibabacloud-go/darabonba-openapi@v0.2.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud-go:darabonba_openapi:v0.2.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud_go:darabonba-openapi:v0.2.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud_go:darabonba_openapi:v0.2.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud:darabonba-openapi:v0.2.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud:darabonba_openapi:v0.2.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:WyzxxKvhdVDlwpAMOHgAiCJ+NXa6g5ZWPFEzaK/ewwY=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/alibabacloud-go/debug@v1.0.0?package-id=d44080a594c1f7b5", "type": "library", "name": "github.com/alibabacloud-go/debug", "version": "v1.0.0", "cpe": "cpe:2.3:a:alibabacloud-go:debug:v1.0.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/alibabacloud-go/debug@v1.0.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud_go:debug:v1.0.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud:debug:v1.0.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:3eIEQWfay1fB24PQIEzXAswlVJtdQok8f3EVN5VrBnA=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/alibabacloud-go/endpoint-util@v1.1.1?package-id=9ec653ae23e6d82b", "type": "library", "name": "github.com/alibabacloud-go/endpoint-util", "version": "v1.1.1", "cpe": "cpe:2.3:a:alibabacloud-go:endpoint-util:v1.1.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/alibabacloud-go/endpoint-util@v1.1.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud-go:endpoint_util:v1.1.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud_go:endpoint-util:v1.1.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud_go:endpoint_util:v1.1.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud:endpoint-util:v1.1.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud:endpoint_util:v1.1.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:ZkBv2/jnghxtU0p+upSU0GGzW1VL9GQdZO3mcSUTUy8=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/alibabacloud-go/openapi-util@v0.1.0?package-id=f4f0a50cc0c42c15", "type": "library", "name": "github.com/alibabacloud-go/openapi-util", "version": "v0.1.0", "cpe": "cpe:2.3:a:alibabacloud-go:openapi-util:v0.1.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/alibabacloud-go/openapi-util@v0.1.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud-go:openapi_util:v0.1.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud_go:openapi-util:v0.1.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud_go:openapi_util:v0.1.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud:openapi-util:v0.1.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud:openapi_util:v0.1.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:0z75cIULkDrdEhkLWgi9tnLe+KhAFE/r5Pb3312/eAY=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/alibabacloud-go/tea@v1.2.1?package-id=fa22593849a7ccd4", "type": "library", "name": "github.com/alibabacloud-go/tea", "version": "v1.2.1", "cpe": "cpe:2.3:a:alibabacloud-go:tea:v1.2.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/alibabacloud-go/tea@v1.2.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud_go:tea:v1.2.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud:tea:v1.2.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:rFF1LnrAdhaiPmKwH5xwYOKlMh66CqRwPUTzIK74ask=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/alibabacloud-go/tea-utils@v1.4.5?package-id=b841ffac07a96e9f", "type": "library", "name": "github.com/alibabacloud-go/tea-utils", "version": "v1.4.5", "cpe": "cpe:2.3:a:alibabacloud-go:tea-utils:v1.4.5:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/alibabacloud-go/tea-utils@v1.4.5", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud-go:tea_utils:v1.4.5:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud_go:tea-utils:v1.4.5:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud_go:tea_utils:v1.4.5:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud:tea-utils:v1.4.5:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud:tea_utils:v1.4.5:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:h0/6Xd2f3bPE4XHTvkpjwxowIwRCJAJOqY6Eq8f3zfA=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/alibabacloud-go/tea-xml@v1.1.3?package-id=ff06bcc2fa22c8eb", "type": "library", "name": "github.com/alibabacloud-go/tea-xml", "version": "v1.1.3", "cpe": "cpe:2.3:a:alibabacloud-go:tea-xml:v1.1.3:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/alibabacloud-go/tea-xml@v1.1.3", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud-go:tea_xml:v1.1.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud_go:tea-xml:v1.1.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud_go:tea_xml:v1.1.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud:tea-xml:v1.1.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:alibabacloud:tea_xml:v1.1.3:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:7LYnm+JbOq2B+T/B0fHC4Ies4/FofC4zHzYtqw7dgt0=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/aliyun/credentials-go@v1.3.2?package-id=b4e83ee066eabb60", "type": "library", "name": "github.com/aliyun/credentials-go", "version": "v1.3.2", "cpe": "cpe:2.3:a:aliyun:credentials-go:v1.3.2:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/aliyun/credentials-go@v1.3.2", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:aliyun:credentials_go:v1.3.2:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:L4WppI9rctC8PdlMgyTkF8bBsy9pyKQEzBD1bHMRl+g=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2?package-id=a86a9cb62c199a48", "type": "library", "name": "github.com/asaskevich/govalidator", "version": "v0.0.0-20230301143203-a9d515a09cc2", "cpe": "cpe:2.3:a:asaskevich:govalidator:v0.0.0-20230301143203-a9d515a09cc2:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:DklsrG3dyBCFEj5IhUbnKptjxatkF07cF2ak3yi77so=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.42.0?package-id=f433d390485b285f", "type": "library", "name": "github.com/aws/aws-sdk-go-v2", "version": "v1.42.0", "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2:v1.42.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.42.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:aws:aws_sdk_go_v2:v1.42.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:XvXMJTkFQtpBKIWZnmr9ZEOc2InWM2yldjXEJ/bymhA=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.25?package-id=2ba6b2eb66201746", "type": "library", "name": "github.com/aws/aws-sdk-go-v2/config", "version": "v1.32.25", "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/config:v1.32.25:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.25", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/config:v1.32.25:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:ACCejvStYoilgwrfegSt5ZntCbPrk52qfwyNcnl3omM=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.24?package-id=dd7bb8328e092185", "type": "library", "name": "github.com/aws/aws-sdk-go-v2/credentials", "version": "v1.19.24", "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/credentials:v1.19.24:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.24", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/credentials:v1.19.24:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:2hQqYCV9yqyePQ9o6dCrZc/zO8U3TwPr9mIKlZnPu/I=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.29?package-id=c7907eb5c3b4fde8", "type": "library", "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds", "version": "v1.18.29", "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/feature\\/ec2\\/imds:v1.18.29:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.29", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/feature\\/ec2\\/imds:v1.18.29:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:r6qZHbT+wxgWO/e9vYNUEtg7lv5+UN3pRqKhLXvnArg=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.29?package-id=b830a34a0b36da7e", "type": "library", "name": "github.com/aws/aws-sdk-go-v2/internal/configsources", "version": "v1.4.29", "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/configsources:v1.4.29:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.29", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/configsources:v1.4.29:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:f3vKqSo13fhTYb+JEcXwXefZQE26I1FB5eTSniU67ko=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.29?package-id=7a7962a2f227199a", "type": "library", "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2", "version": "v2.7.29", "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/endpoints\\/v2:v2.7.29:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.29", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/endpoints\\/v2:v2.7.29:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:RdwIf/CuUsvJX3RgJagbOyotl/cxoLY4xviKuE7p2GY=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.30?package-id=c98a0684b501009d", "type": "library", "name": "github.com/aws/aws-sdk-go-v2/internal/v4a", "version": "v1.4.30", "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/v4a:v1.4.30:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.30", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/v4a:v1.4.30:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:VTGy885W5DKBxWRUJbym9hytNaYzsyaPkCHGRRMAOhU=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.55.3?package-id=6881a4b844dcd393", "type": "library", "name": "github.com/aws/aws-sdk-go-v2/service/ecr", "version": "v1.55.3", "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ecr:v1.55.3:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.55.3", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ecr:v1.55.3:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:RtGctYMmkTerGClvdY6bHXdtly4FeYw9wz/NPz62LF8=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecrpublic@v1.38.10?package-id=609d2867e33fb3c7", "type": "library", "name": "github.com/aws/aws-sdk-go-v2/service/ecrpublic", "version": "v1.38.10", "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ecrpublic:v1.38.10:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecrpublic@v1.38.10", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ecrpublic:v1.38.10:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:1A/sI3LNMi3fhRI5TFLMwwo7ALAALSFVCSGvFlr1Iys=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.12?package-id=d41d72bf86bf58fb", "type": "library", "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding", "version": "v1.13.12", "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/accept-encoding:v1.13.12:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.12", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/accept_encoding:v1.13.12:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:ZD2+BSw9vFsNlKYIasSNt3uDbjqqXIBcM13UJv/Lx2k=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.29?package-id=c17e921291785cf2", "type": "library", "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url", "version": "v1.13.29", "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/presigned-url:v1.13.29:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.29", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/presigned_url:v1.13.29:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:DRebniUGZ2MqiiIVmQJ04vIXr918hubdHMnarSLEWyU=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/kms@v1.53.4?package-id=be7e0ec912d96295", "type": "library", "name": "github.com/aws/aws-sdk-go-v2/service/kms", "version": "v1.53.4", "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/kms:v1.53.4:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/kms@v1.53.4", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/kms:v1.53.4:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:PEgVSsWtR8NNxsDxFL2Ywisi7R+1EFQARGsT4q3mWwI=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.2.0?package-id=11bac7c1bc914ca7", "type": "library", "name": "github.com/aws/aws-sdk-go-v2/service/signin", "version": "v1.2.0", "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/signin:v1.2.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.2.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/signin:v1.2.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:3nXpRcFwRCW8n7HgO2QGy0Dc20eQNfBuUemGQhpF8m8=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.31.3?package-id=d564c598e7bcca9c", "type": "library", "name": "github.com/aws/aws-sdk-go-v2/service/sso", "version": "v1.31.3", "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sso:v1.31.3:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.31.3", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sso:v1.31.3:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:ey1XLTYXb9PcLt4535632o5kCGXNXEhNb620Dqwuylo=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.36.6?package-id=995ebab973b1f52a", "type": "library", "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc", "version": "v1.36.6", "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ssooidc:v1.36.6:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.36.6", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ssooidc:v1.36.6:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:yLr03zQE/5Eu5l3QU0Si+xMbLMbSDF2YXsigqXngs6g=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.43.3?package-id=c317f31fd67d5a3d", "type": "library", "name": "github.com/aws/aws-sdk-go-v2/service/sts", "version": "v1.43.3", "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sts:v1.43.3:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.43.3", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sts:v1.43.3:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:VrIhKRCSK1umelSgB9RghvA9RTUYeQffyAS5ApXehNI=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/aws/smithy-go@v1.27.2?package-id=29fbe9cdc9e9d67b", "type": "library", "name": "github.com/aws/smithy-go", "version": "v1.27.2", "cpe": "cpe:2.3:a:aws:smithy-go:v1.27.2:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/aws/smithy-go@v1.27.2", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:aws:smithy_go:v1.27.2:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:y9NPmSE6am6LjEFPfqHqG/jJk7AauQvhCJONKh7kpzk=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/awslabs/amazon-ecr-credential-helper/ecr-login@v0.12.0?package-id=5c114de4bdf93c23", "type": "library", "name": "github.com/awslabs/amazon-ecr-credential-helper/ecr-login", "version": "v0.12.0", "cpe": "cpe:2.3:a:awslabs:amazon-ecr-credential-helper\\/ecr-login:v0.12.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/awslabs/amazon-ecr-credential-helper/ecr-login@v0.12.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:awslabs:amazon_ecr_credential_helper\\/ecr_login:v0.12.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:JFWXO6QPihCknDdnL6VaQE57km4ZKheHIGd9YiOGcTo=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible?package-id=ffeca20200a341fa", "type": "library", "name": "github.com/blang/semver", "version": "v3.5.1+incompatible", "cpe": "cpe:2.3:a:blang:semver:v3.5.1\\+incompatible:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:cQNTCjp13qL8KC3Nbxr/y2Bqb63oX6wdnnjpJbkM4JQ=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/buildkite/agent/v3@v3.130.0?package-id=abfab838e0ff9a0b", "type": "library", "name": "github.com/buildkite/agent/v3", "version": "v3.130.0", "cpe": "cpe:2.3:a:buildkite:agent\\/v3:v3.130.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/buildkite/agent/v3@v3.130.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:fYo5iTrYAK6OTBWBoF7M627tnCKhZaRTD+Ex186dJZ0=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/buildkite/go-pipeline@v0.17.1?package-id=6444de831854275a", "type": "library", "name": "github.com/buildkite/go-pipeline", "version": "v0.17.1", "cpe": "cpe:2.3:a:buildkite:go-pipeline:v0.17.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/buildkite/go-pipeline@v0.17.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:buildkite:go_pipeline:v0.17.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:m7+a2SF9hLjqsbe6HShmzm9M4rDk4QtanKTF2LD6LG0=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/buildkite/interpolate@v0.1.5?package-id=322cec5bd7d42da6", "type": "library", "name": "github.com/buildkite/interpolate", "version": "v0.1.5", "cpe": "cpe:2.3:a:buildkite:interpolate:v0.1.5:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/buildkite/interpolate@v0.1.5", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:v2Ji3voik69UZlbfoqzx+qfcsOKLA61nHdU79VV+tPU=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/buildkite/roko@v1.4.0?package-id=d95882a7b8b74985", "type": "library", "name": "github.com/buildkite/roko", "version": "v1.4.0", "cpe": "cpe:2.3:a:buildkite:roko:v1.4.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/buildkite/roko@v1.4.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:DxixoCdpNqxu4/1lXrXbfsKbJSd7r1qoxtef/TT2J80=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0?package-id=1c25c6308830e2eb", "type": "library", "name": "github.com/cenkalti/backoff/v4", "version": "v4.3.0", "cpe": "cpe:2.3:a:cenkalti:backoff\\/v4:v4.3.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:MyRJ/UdXutAwSAT+s3wNd7MfTIcy71VQueUuFK343L8=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3?package-id=2a72e6c924703a7b", "type": "library", "name": "github.com/cenkalti/backoff/v5", "version": "v5.0.3", "cpe": "cpe:2.3:a:cenkalti:backoff\\/v5:v5.0.3:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:ZN+IMa753KfX5hd8vVaMixjnqRZ3y8CuJKRKj1xcsSM=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?package-id=c74f0b5c421b113c", "type": "library", "name": "github.com/cespare/xxhash/v2", "version": "v2.3.0", "cpe": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589?package-id=822f2649cb290ba4", "type": "library", "name": "github.com/chrismellard/docker-credential-acr-env", "version": "v0.0.0-20230304212654-82a0ddb27589", "cpe": "cpe:2.3:a:chrismellard:docker-credential-acr-env:v0.0.0-20230304212654-82a0ddb27589:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:chrismellard:docker_credential_acr_env:v0.0.0-20230304212654-82a0ddb27589:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:krfRl01rzPzxSxyLyrChD+U+MzsBXbm0OwYYB67uF+4=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/clbanning/mxj/v2@v2.7.0?package-id=f634c64c4d55cadc", "type": "library", "name": "github.com/clbanning/mxj/v2", "version": "v2.7.0", "cpe": "cpe:2.3:a:clbanning:mxj\\/v2:v2.7.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/clbanning/mxj/v2@v2.7.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:WA/La7UGCanFe5NpHF0Q3DNtnCsVoxbPKuyBNHWRyME=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/cockroachdb/apd/v3@v3.2.1?package-id=05186a36ba63f52d", "type": "library", "name": "github.com/cockroachdb/apd/v3", "version": "v3.2.1", "cpe": "cpe:2.3:a:cockroachdb:apd\\/v3:v3.2.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/cockroachdb/apd/v3@v3.2.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:U+8j7t0axsIgvQUqthuNm82HIrYXodOV2iWLWtEaIwg=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20210622060536-734e95fb86be?package-id=4b2e3a325b57bbaf", "type": "library", "name": "github.com/common-nighthawk/go-figure", "version": "v0.0.0-20210622060536-734e95fb86be", "cpe": "cpe:2.3:a:common-nighthawk:go-figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20210622060536-734e95fb86be", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:common-nighthawk:go_figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:common_nighthawk:go-figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:common_nighthawk:go_figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:common:go-figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:common:go_figure:v0.0.0-20210622060536-734e95fb86be:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:J5BL2kskAlV9ckgEsNQXscjIaLiOYiZ75d4e94E6dcQ=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/coreos/go-oidc/v3@v3.18.0?package-id=ca088e7aae563ad2", "type": "library", "name": "github.com/coreos/go-oidc/v3", "version": "v3.18.0", "cpe": "cpe:2.3:a:coreos:go-oidc\\/v3:v3.18.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/coreos/go-oidc/v3@v3.18.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:coreos:go_oidc\\/v3:v3.18.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:V9orjXynvu5wiC9SemFTWnG4F45v403aIcjWo0d41+A=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467?package-id=5c507dcb20521c38", "type": "library", "name": "github.com/cyberphone/json-canonicalization", "version": "v0.0.0-20241213102144-19d51d7fe467", "cpe": "cpe:2.3:a:cyberphone:json-canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:cyberphone:json_canonicalization:v0.0.0-20241213102144-19d51d7fe467:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:uX1JmpONuD549D73r6cgnxyUu18Zb7yHAy5AYU0Pm4Q=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc?package-id=8563ccd292fa72d6", "type": "library", "name": "github.com/davecgh/go-spew", "version": "v1.1.2-0.20180830191138-d8f796af33cc", "cpe": "cpe:2.3:a:davecgh:go-spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:davecgh:go_spew:v1.1.2-0.20180830191138-d8f796af33cc:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20230818184609-3a137a874352?package-id=d9246646679f712b", "type": "library", "name": "github.com/digitorus/pkcs7", "version": "v0.0.0-20230818184609-3a137a874352", "cpe": "cpe:2.3:a:digitorus:pkcs7:v0.0.0-20230818184609-3a137a874352:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20230818184609-3a137a874352", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:ge14PCmCvPjpMQMIAH7uKg0lrtNSOdpYsRXlwk3QbaE=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20231217203849-220c5c2851b7?package-id=9b0bbfc65ae4cb68", "type": "library", "name": "github.com/digitorus/timestamp", "version": "v0.0.0-20231217203849-220c5c2851b7", "cpe": "cpe:2.3:a:digitorus:timestamp:v0.0.0-20231217203849-220c5c2851b7:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20231217203849-220c5c2851b7", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:lxmTCgmHE1GUYL7P0MlNa00M67axePTq+9nBSGddR8I=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/dimchansky/utfbom@v1.1.1?package-id=6be49ba6b7fe8f0b", "type": "library", "name": "github.com/dimchansky/utfbom", "version": "v1.1.1", "cpe": "cpe:2.3:a:dimchansky:utfbom:v1.1.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/dimchansky/utfbom@v1.1.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:vV6w1AhK4VMnhBno/TPVCoK9U/LP0PkLCS9tbxHdi/U=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/docker/cli@v29.5.3%2Bincompatible?package-id=4c271c0eaaadebbd", "type": "library", "name": "github.com/docker/cli", "version": "v29.5.3+incompatible", "cpe": "cpe:2.3:a:docker:cli:v29.5.3\\+incompatible:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/docker/cli@v29.5.3%2Bincompatible", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:nbEFfz774vBwQ5KRYv7c/AghjReqnGISvrRhzjV0evs=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5?package-id=1b4fe80612dc0f8a", "type": "library", "name": "github.com/docker/docker-credential-helpers", "version": "v0.9.5", "cpe": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.5:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.5:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:EFNN8DHvaiK8zVqFA2DT6BjXE0GzfLOZ38ggPTKePkY=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/dustin/go-humanize@v1.0.1?package-id=3f5e3dde3f1ea6c0", "type": "library", "name": "github.com/dustin/go-humanize", "version": "v1.0.1", "cpe": "cpe:2.3:a:dustin:go-humanize:v1.0.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/dustin/go-humanize@v1.0.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:dustin:go_humanize:v1.0.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0?package-id=4e49692537d3125a", "type": "library", "name": "github.com/emicklei/go-restful/v3", "version": "v3.13.0", "cpe": "cpe:2.3:a:emicklei:go-restful\\/v3:v3.13.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:emicklei:go_restful\\/v3:v3.13.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:C4Bl2xDndpU6nJ4bc1jXd+uTmYPVUwkD6bFY/oTyCes=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/emicklei/proto@v1.14.3?package-id=0b91f0ca5a048197", "type": "library", "name": "github.com/emicklei/proto", "version": "v1.14.3", "cpe": "cpe:2.3:a:emicklei:proto:v1.14.3:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/emicklei/proto@v1.14.3", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:zEhlzNkpP8kN6utonKMzlPfIvy82t5Kb9mufaJxSe1Q=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4?package-id=73640de86c7c0f7f", "type": "library", "name": "github.com/felixge/httpsnoop", "version": "v1.0.4", "cpe": "cpe:2.3:a:felixge:httpsnoop:v1.0.4:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1?package-id=88540cc4353f1003", "type": "library", "name": "github.com/fsnotify/fsnotify", "version": "v1.10.1", "cpe": "cpe:2.3:a:fsnotify:fsnotify:v1.10.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:b0/UzAf9yR5rhf3RPm9gf3ehBPpf0oZKIjtpKrx59Ho=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0?package-id=288a5daecbe8c4c0", "type": "library", "name": "github.com/fxamacker/cbor/v2", "version": "v2.9.0", "cpe": "cpe:2.3:a:fxamacker:cbor\\/v2:v2.9.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:NpKPmjDBgUfBms6tr6JZkTHtfFGcMKsw3eGcmD/sapM=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-chi/chi/v5@v5.3.0?package-id=30d805043625a4c8", "type": "library", "name": "github.com/go-chi/chi/v5", "version": "v5.3.0", "cpe": "cpe:2.3:a:go-chi:chi\\/v5:v5.3.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-chi/chi/v5@v5.3.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_chi:chi\\/v5:v5.3.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:chi\\/v5:v5.3.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:halUjDxhshgXHMrao5bB8eNBXo/rnzwr8m5m36glehM=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4?package-id=041434a4442e406c", "type": "library", "name": "github.com/go-jose/go-jose/v4", "version": "v4.1.4", "cpe": "cpe:2.3:a:go-jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go-jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_jose:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_jose:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:go-jose\\/v4:v4.1.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:go_jose\\/v4:v4.1.4:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:moDMcTHmvE6Groj34emNPLs/qtYXRVcd6S7NHbHz3kA=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-logr/logr@v1.4.3?package-id=e8441e9847a942e0", "type": "library", "name": "github.com/go-logr/logr", "version": "v1.4.3", "cpe": "cpe:2.3:a:go-logr:logr:v1.4.3:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-logr/logr@v1.4.3", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_logr:logr:v1.4.3:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:logr:v1.4.3:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-logr/stdr@v1.2.2?package-id=cd8a848acac7f2b9", "type": "library", "name": "github.com/go-logr/stdr", "version": "v1.2.2", "cpe": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-logr/stdr@v1.2.2", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-openapi/analysis@v0.25.2?package-id=e5a19a41207c0219", "type": "library", "name": "github.com/go-openapi/analysis", "version": "v0.25.2", "cpe": "cpe:2.3:a:go-openapi:analysis:v0.25.2:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-openapi/analysis@v0.25.2", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_openapi:analysis:v0.25.2:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:analysis:v0.25.2:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:I0vy4n3alz+DHTiN1PRhCb7QZxkK6g5YmswZKv2TKuw=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-openapi/errors@v0.22.8?package-id=6344058807360661", "type": "library", "name": "github.com/go-openapi/errors", "version": "v0.22.8", "cpe": "cpe:2.3:a:go-openapi:errors:v0.22.8:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-openapi/errors@v0.22.8", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_openapi:errors:v0.22.8:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:errors:v0.22.8:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:oP7sW7TWc3wFFjrzzj0nI83H2qMBkNjNfSd+XRejk/I=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-openapi/jsonpointer@v0.23.1?package-id=8c6b581cdb9a3056", "type": "library", "name": "github.com/go-openapi/jsonpointer", "version": "v0.23.1", "cpe": "cpe:2.3:a:go-openapi:jsonpointer:v0.23.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-openapi/jsonpointer@v0.23.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_openapi:jsonpointer:v0.23.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:jsonpointer:v0.23.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:1HBACs7XIwR2RcmItfdSFlALhGbe6S92p0ry4d1GWg4=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-openapi/jsonreference@v0.21.6?package-id=7d98f098e0ad0985", "type": "library", "name": "github.com/go-openapi/jsonreference", "version": "v0.21.6", "cpe": "cpe:2.3:a:go-openapi:jsonreference:v0.21.6:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-openapi/jsonreference@v0.21.6", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_openapi:jsonreference:v0.21.6:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:jsonreference:v0.21.6:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:NZ5nGfnaM1n4I43Xjm1e5/M2GjOwQwndQz22uhxwD+Y=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-openapi/loads@v0.24.0?package-id=3a01a1b081afb9e1", "type": "library", "name": "github.com/go-openapi/loads", "version": "v0.24.0", "cpe": "cpe:2.3:a:go-openapi:loads:v0.24.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-openapi/loads@v0.24.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_openapi:loads:v0.24.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:loads:v0.24.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:4LLorXRPTzIN9V6ngMUZbAscsBOUBk3Oa8cClu/bFrQ=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-openapi/runtime@v0.32.4?package-id=8f0baadef50971df", "type": "library", "name": "github.com/go-openapi/runtime", "version": "v0.32.4", "cpe": "cpe:2.3:a:go-openapi:runtime:v0.32.4:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-openapi/runtime@v0.32.4", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_openapi:runtime:v0.32.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:runtime:v0.32.4:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:8ElGj/3goG0itt0nBPP6Cm57ehcYyuHoI3O20nxgvkw=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-openapi/runtime/server-middleware@v0.30.0?package-id=941d9e69bd80671c", "type": "library", "name": "github.com/go-openapi/runtime/server-middleware", "version": "v0.30.0", "cpe": "cpe:2.3:a:go-openapi:runtime\\/server-middleware:v0.30.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-openapi/runtime/server-middleware@v0.30.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go-openapi:runtime\\/server_middleware:v0.30.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_openapi:runtime\\/server-middleware:v0.30.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_openapi:runtime\\/server_middleware:v0.30.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:runtime\\/server-middleware:v0.30.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:runtime\\/server_middleware:v0.30.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:8rPoJ/xv7JL8BsovaqboKETlpWBArVh8n+0L/GyePog=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-openapi/spec@v0.22.6?package-id=1f4ce81c3240cd13", "type": "library", "name": "github.com/go-openapi/spec", "version": "v0.22.6", "cpe": "cpe:2.3:a:go-openapi:spec:v0.22.6:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-openapi/spec@v0.22.6", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_openapi:spec:v0.22.6:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:spec:v0.22.6:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:Tyy1pLaNCM8GBCFLoGYLonjJi6zykqyLCjXLc19ZPic=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-openapi/strfmt@v0.26.4?package-id=7592de14cecb007b", "type": "library", "name": "github.com/go-openapi/strfmt", "version": "v0.26.4", "cpe": "cpe:2.3:a:go-openapi:strfmt:v0.26.4:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-openapi/strfmt@v0.26.4", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_openapi:strfmt:v0.26.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:strfmt:v0.26.4:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:yI6IAEfcWow459BD5UzFY430KUwXZwBHrYusPFkhWlc=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-openapi/swag@v0.26.1?package-id=76031e608120788a", "type": "library", "name": "github.com/go-openapi/swag", "version": "v0.26.1", "cpe": "cpe:2.3:a:go-openapi:swag:v0.26.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-openapi/swag@v0.26.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_openapi:swag:v0.26.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:swag:v0.26.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:l5sVEyVpwj+DDYeZyo7wQI/Ebn/mKYIyGB/pFwAfGoQ=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.26.1?package-id=5249c20a1f0f6125", "type": "library", "name": "github.com/go-openapi/swag/cmdutils", "version": "v0.26.1", "cpe": "cpe:2.3:a:go-openapi:swag\\/cmdutils:v0.26.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.26.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_openapi:swag\\/cmdutils:v0.26.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:swag\\/cmdutils:v0.26.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:f2iE1ijYaJ3nuu5PaEMx3zpEhzhZFgivCJObWEObLIQ=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-openapi/swag/conv@v0.27.0?package-id=64e01b917ded6946", "type": "library", "name": "github.com/go-openapi/swag/conv", "version": "v0.27.0", "cpe": "cpe:2.3:a:go-openapi:swag\\/conv:v0.27.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-openapi/swag/conv@v0.27.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_openapi:swag\\/conv:v0.27.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:swag\\/conv:v0.27.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:EKOH4feXrvdo8DbSsXSAqRT8fz1epEnS5O2IfXUOzE8=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-openapi/swag/fileutils@v0.26.1?package-id=cddb89b7bcc96133", "type": "library", "name": "github.com/go-openapi/swag/fileutils", "version": "v0.26.1", "cpe": "cpe:2.3:a:go-openapi:swag\\/fileutils:v0.26.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-openapi/swag/fileutils@v0.26.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_openapi:swag\\/fileutils:v0.26.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:swag\\/fileutils:v0.26.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:K1XCM2CGhfNsc6YDt6v7Q5+1e59rftYWdcu/isZhvFw=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-openapi/swag/jsonname@v0.26.1?package-id=0a32b173b9ba4d57", "type": "library", "name": "github.com/go-openapi/swag/jsonname", "version": "v0.26.1", "cpe": "cpe:2.3:a:go-openapi:swag\\/jsonname:v0.26.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-openapi/swag/jsonname@v0.26.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_openapi:swag\\/jsonname:v0.26.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:swag\\/jsonname:v0.26.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:VReupaV6WxlAsCn0e4DUfgV6bPmINnPpyJDLqSfNPcE=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.26.1?package-id=58cc527bc944e0f1", "type": "library", "name": "github.com/go-openapi/swag/jsonutils", "version": "v0.26.1", "cpe": "cpe:2.3:a:go-openapi:swag\\/jsonutils:v0.26.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.26.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_openapi:swag\\/jsonutils:v0.26.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:swag\\/jsonutils:v0.26.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:2hdBfFkHg+7Wrz2VsCbeyR6hzkRDs7AztnMR2u84yOY=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-openapi/swag/loading@v0.26.1?package-id=d55448928bd57942", "type": "library", "name": "github.com/go-openapi/swag/loading", "version": "v0.26.1", "cpe": "cpe:2.3:a:go-openapi:swag\\/loading:v0.26.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-openapi/swag/loading@v0.26.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_openapi:swag\\/loading:v0.26.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:swag\\/loading:v0.26.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:E9K4wqXeROlhjFQ13K9zMz6ojFGXIggGe+ad1odrK9w=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-openapi/swag/mangling@v0.26.1?package-id=78751fffa88bc056", "type": "library", "name": "github.com/go-openapi/swag/mangling", "version": "v0.26.1", "cpe": "cpe:2.3:a:go-openapi:swag\\/mangling:v0.26.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-openapi/swag/mangling@v0.26.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_openapi:swag\\/mangling:v0.26.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:swag\\/mangling:v0.26.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:gpYI4WuPKFJJVjV5cDLGlDVJhFIxYjQc7yN5eEb4CqM=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-openapi/swag/netutils@v0.26.1?package-id=f96def0cbd9ce51c", "type": "library", "name": "github.com/go-openapi/swag/netutils", "version": "v0.26.1", "cpe": "cpe:2.3:a:go-openapi:swag\\/netutils:v0.26.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-openapi/swag/netutils@v0.26.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_openapi:swag\\/netutils:v0.26.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:swag\\/netutils:v0.26.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:BNctoc39WTAUMxyAs355fExOPzMZtPbZ0ZZ1Am2FR5M=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-openapi/swag/stringutils@v0.26.1?package-id=45c5be6233ceef57", "type": "library", "name": "github.com/go-openapi/swag/stringutils", "version": "v0.26.1", "cpe": "cpe:2.3:a:go-openapi:swag\\/stringutils:v0.26.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-openapi/swag/stringutils@v0.26.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_openapi:swag\\/stringutils:v0.26.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:swag\\/stringutils:v0.26.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:f88uYyTso7TnHrKM/bUBsQ5e2wKf37cpgo6pvbzd9yU=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-openapi/swag/typeutils@v0.27.0?package-id=4a4fbff35cbdce19", "type": "library", "name": "github.com/go-openapi/swag/typeutils", "version": "v0.27.0", "cpe": "cpe:2.3:a:go-openapi:swag\\/typeutils:v0.27.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-openapi/swag/typeutils@v0.27.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_openapi:swag\\/typeutils:v0.27.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:swag\\/typeutils:v0.27.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:aCf4MSGo8NLwZP8Q6t32DWLJSvl/WwNqgmEG+xJ6v2o=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.26.1?package-id=4eda830f8f38faa8", "type": "library", "name": "github.com/go-openapi/swag/yamlutils", "version": "v0.26.1", "cpe": "cpe:2.3:a:go-openapi:swag\\/yamlutils:v0.26.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.26.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_openapi:swag\\/yamlutils:v0.26.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:swag\\/yamlutils:v0.26.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:0TSLK+lXs9vfIhAWzBeI/lOzEnIoot6WTCO1aAeWFTk=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-openapi/validate@v0.26.0?package-id=50deeed2d23d0b74", "type": "library", "name": "github.com/go-openapi/validate", "version": "v0.26.0", "cpe": "cpe:2.3:a:go-openapi:validate:v0.26.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-openapi/validate@v0.26.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_openapi:validate:v0.26.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:validate:v0.26.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:dxWzQ3F+vb1SajqUxHjwb5T4mTpSHmdrtv5Bi7+ZNhw=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0?package-id=cbed1cdd07c7498c", "type": "library", "name": "github.com/go-viper/mapstructure/v2", "version": "v2.5.0", "cpe": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:vM5IJoUAy3d7zRSVtIwQgBj7BiWtMPfmPEgAXnvj1Ro=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/gobwas/glob@v0.2.3?package-id=380556d81593652b", "type": "library", "name": "github.com/gobwas/glob", "version": "v0.2.3", "cpe": "cpe:2.3:a:gobwas:glob:v0.2.3:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/gobwas/glob@v0.2.3", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:A4xDbljILXROh+kObIiy5kIaPYD8e96x1tgBhUI5J+Y=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2?package-id=64264fa7188f584d", "type": "library", "name": "github.com/golang-jwt/jwt/v4", "version": "v4.5.2", "cpe": "cpe:2.3:a:golang-jwt:jwt\\/v4:v4.5.2:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:golang_jwt:jwt\\/v4:v4.5.2:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:golang:jwt\\/v4:v4.5.2:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:YtQM7lnr8iZ+j5q71MGKkNw9Mn7AjHM68uc9g5fXeUI=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1?package-id=76e05903adc826ce", "type": "library", "name": "github.com/golang-jwt/jwt/v5", "version": "v5.3.1", "cpe": "cpe:2.3:a:golang-jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:golang_jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:golang:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:kYf81DTWFe7t+1VvL7eS+jKFVWaUnK9cB1qbwn63YCY=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/golang/snappy@v0.0.4?package-id=3548e28213aa3c53", "type": "library", "name": "github.com/golang/snappy", "version": "v0.0.4", "cpe": "cpe:2.3:a:golang:snappy:v0.0.4:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/golang/snappy@v0.0.4", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:yAGX7huGHXlcLOEtBnF4w7FQwA26wojNCwOYAEhLjQM=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/google/certificate-transparency-go@v1.3.3?package-id=b6457f0457f56c88", "type": "library", "name": "github.com/google/certificate-transparency-go", "version": "v1.3.3", "cpe": "cpe:2.3:a:google:certificate-transparency-go:v1.3.3:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/google/certificate-transparency-go@v1.3.3", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:google:certificate_transparency_go:v1.3.3:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:hq/rSxztSkXN2tx/3jQqF6Xc0O565UQPdHrOWvZwybo=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/google/gnostic-models@v0.7.0?package-id=36fb2b67834a4f48", "type": "library", "name": "github.com/google/gnostic-models", "version": "v0.7.0", "cpe": "cpe:2.3:a:google:gnostic-models:v0.7.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/google/gnostic-models@v0.7.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:google:gnostic_models:v0.7.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:qwTtogB15McXDaNqTZdzPJRHvaVJlAl+HVQnLmJEJxo=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.7.0?package-id=98e170c8fa1e72c6", "type": "library", "name": "github.com/google/go-cmp", "version": "v0.7.0", "cpe": "cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/google/go-cmp@v0.7.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/google/go-containerregistry@v0.21.7?package-id=a83cb58ec12357cb", "type": "library", "name": "github.com/google/go-containerregistry", "version": "v0.21.7", "cpe": "cpe:2.3:a:google:go-containerregistry:v0.21.7:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/google/go-containerregistry@v0.21.7", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:google:go_containerregistry:v0.21.7:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:/vPFuVXDjtFREsVArW+0h1CIl5urnOhzei4X2DMW9IU=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/google/go-github/v88@v88.0.0?package-id=a7ffd80cd6a1b9c5", "type": "library", "name": "github.com/google/go-github/v88", "version": "v88.0.0", "cpe": "cpe:2.3:a:google:go-github\\/v88:v88.0.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/google/go-github/v88@v88.0.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:google:go_github\\/v88:v88.0.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:dZA9IKkPK1eXZj4ypngnpRj5FwdpTv4whix2PrQMP7M=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/google/go-querystring@v1.2.0?package-id=3cdb4891177cee41", "type": "library", "name": "github.com/google/go-querystring", "version": "v1.2.0", "cpe": "cpe:2.3:a:google:go-querystring:v1.2.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/google/go-querystring@v1.2.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:google:go_querystring:v1.2.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:yhqkPbu2/OH+V9BfpCVPZkNmUXhb2gBxJArfhIxNtP0=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/google/s2a-go@v0.1.9?package-id=01eef039a65f500b", "type": "library", "name": "github.com/google/s2a-go", "version": "v0.1.9", "cpe": "cpe:2.3:a:google:s2a-go:v0.1.9:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/google/s2a-go@v0.1.9", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:google:s2a_go:v0.1.9:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:LGD7gtMgezd8a/Xak7mEWL0PjoTQFvpRudN895yqKW0=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/google/uuid@v1.6.0?package-id=e86facf3de3280a5", "type": "library", "name": "github.com/google/uuid", "version": "v1.6.0", "cpe": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/google/uuid@v1.6.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.16?package-id=1ea2c686ef5acc68", "type": "library", "name": "github.com/googleapis/enterprise-certificate-proxy", "version": "v0.3.16", "cpe": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.16:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.16", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.16:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:F/VPrx0YPBdksZJQdCAp0WUsqnNmZpUZszzfYt0M5Dw=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/googleapis/gax-go/v2@v2.22.0?package-id=44672b3260f87586", "type": "library", "name": "github.com/googleapis/gax-go/v2", "version": "v2.22.0", "cpe": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.22.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/googleapis/gax-go/v2@v2.22.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:googleapis:gax_go\\/v2:v2.22.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:PjIWBpgGIVKGoCXuiCoP64altEJCj3/Ei+kSU5vlZD4=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0?package-id=fa7ba9db8882500e", "type": "library", "name": "github.com/grpc-ecosystem/grpc-gateway/v2", "version": "v2.29.0", "cpe": "cpe:2.3:a:grpc-ecosystem:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:grpc-ecosystem:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:grpc_ecosystem:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:grpc_ecosystem:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:grpc:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:grpc:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:5VipnvEpbqr2gA2VbM+nYVbkIF28c5ZQfqCBQ5g2xfk=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0?package-id=48c0c5ef6cbbbd97", "type": "library", "name": "github.com/hashicorp/errwrap", "version": "v1.1.0", "cpe": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2?package-id=77c9a103d9a3e924", "type": "library", "name": "github.com/hashicorp/go-cleanhttp", "version": "v0.5.2", "cpe": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1?package-id=28453a565d0c3f48", "type": "library", "name": "github.com/hashicorp/go-multierror", "version": "v1.1.1", "cpe": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8?package-id=91c94614ac7a150c", "type": "library", "name": "github.com/hashicorp/go-retryablehttp", "version": "v0.7.8", "cpe": "cpe:2.3:a:hashicorp:retryablehttp:v0.7.8:*:*:*:*:go:*:*", "purl": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:ylXZWnqa7Lhqpk0L1P1LzDtGcCR0rPVUrx/c8Unxc48=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/hashicorp/go-rootcerts@v1.0.2?package-id=ae1559a58a8e6b2c", "type": "library", "name": "github.com/hashicorp/go-rootcerts", "version": "v1.0.2", "cpe": "cpe:2.3:a:hashicorp:go-rootcerts:v1.0.2:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/hashicorp/go-rootcerts@v1.0.2", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hashicorp:go_rootcerts:v1.0.2:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:jzhAVGtqPKbwpyCPELlgNWhE1znq+qwJtW5Oi2viEzc=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.2.0?package-id=998e03f76c077270", "type": "library", "name": "github.com/hashicorp/go-secure-stdlib/parseutil", "version": "v0.2.0", "cpe": "cpe:2.3:a:hashicorp:go-secure-stdlib\\/parseutil:v0.2.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.2.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hashicorp:go_secure_stdlib\\/parseutil:v0.2.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:U+kC2dOhMFQctRfhK0gRctKAPTloZdMU5ZJxaesJ/VM=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2?package-id=4550af8a844634d7", "type": "library", "name": "github.com/hashicorp/go-secure-stdlib/strutil", "version": "v0.1.2", "cpe": "cpe:2.3:a:hashicorp:go-secure-stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hashicorp:go_secure_stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:kes8mmyCpxJsI7FTwtzRqEy9CdjCtrXrXGuOpxEA7Ts=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.7?package-id=db730f5b04896a3b", "type": "library", "name": "github.com/hashicorp/go-sockaddr", "version": "v1.0.7", "cpe": "cpe:2.3:a:hashicorp:go-sockaddr:v1.0.7:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.7", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:hashicorp:go_sockaddr:v1.0.7:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:G+pTkSO01HpR5qCxg7lxfsFEZaG+C0VssTy/9dbT+Fw=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-7?package-id=2621f1fa39270fc2", "type": "library", "name": "github.com/hashicorp/hcl", "version": "v1.0.1-vault-7", "cpe": "cpe:2.3:a:hashicorp:hcl:v1.0.1-vault-7:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-7", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:ag5OxFVy3QYTFTJODRzTKVZ6xvdfLLCA1cy/Y6xGI0I=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/hashicorp/vault/api@v1.22.0?package-id=97ce4d0148eaed12", "type": "library", "name": "github.com/hashicorp/vault/api", "version": "v1.22.0", "cpe": "cpe:2.3:a:hashicorp:vault\\/api:v1.22.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/hashicorp/vault/api@v1.22.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:+HYFquE35/B74fHoIeXlZIP2YADVboaPjaSicHEZiH0=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/in-toto/attestation@v1.2.0?package-id=bc071895f1d5bc53", "type": "library", "name": "github.com/in-toto/attestation", "version": "v1.2.0", "cpe": "cpe:2.3:a:in-toto:attestation:v1.2.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/in-toto/attestation@v1.2.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:in_toto:attestation:v1.2.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:in:attestation:v1.2.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:aPRUZ3azbqD7yEBD5fP3TD8Dszf+YHo284SOcpahjQk=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/in-toto/in-toto-golang@v0.11.0?package-id=6f517d0abd340aab", "type": "library", "name": "github.com/in-toto/in-toto-golang", "version": "v0.11.0", "cpe": "cpe:2.3:a:in-toto:in-toto-golang:v0.11.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/in-toto/in-toto-golang@v0.11.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:in-toto:in_toto_golang:v0.11.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:in_toto:in-toto-golang:v0.11.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:in_toto:in_toto_golang:v0.11.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:in:in-toto-golang:v0.11.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:in:in_toto_golang:v0.11.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:nfidMYBFx+E0lnmX5KUnN2Pdm8zdNKal1ayjJuzzRoA=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20230811132847-661be99b8267?package-id=96f45417e1619aaa", "type": "library", "name": "github.com/jedisct1/go-minisign", "version": "v0.0.0-20230811132847-661be99b8267", "cpe": "cpe:2.3:a:jedisct1:go-minisign:v0.0.0-20230811132847-661be99b8267:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20230811132847-661be99b8267", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:jedisct1:go_minisign:v0.0.0-20230811132847-661be99b8267:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:TMtDYDHKYY15rFihtRfck/bfFqNfvcabqvXAFQfAUpY=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/jellydator/ttlcache/v3@v3.4.0?package-id=d1d055a538801387", "type": "library", "name": "github.com/jellydator/ttlcache/v3", "version": "v3.4.0", "cpe": "cpe:2.3:a:jellydator:ttlcache\\/v3:v3.4.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/jellydator/ttlcache/v3@v3.4.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:YS4P125qQS0tNhtL6aeYkheEaB/m8HCqdMMP4mnWdTY=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.12?package-id=313e4eeb8068a695", "type": "library", "name": "github.com/json-iterator/go", "version": "v1.1.12", "cpe": "cpe:2.3:a:json-iterator:go:v1.1.12:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:json_iterator:go:v1.1.12:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:json:go:v1.1.12:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/klauspost/compress@v1.18.6?package-id=d7192dc1775fec0d", "type": "library", "name": "github.com/klauspost/compress", "version": "v1.18.6", "cpe": "cpe:2.3:a:klauspost:compress:v1.18.6:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/klauspost/compress@v1.18.6", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:2jupLlAwFm95+YDR+NwD2MEfFO9d4z4Prjl1XXDjuao=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/kylelemons/godebug@v1.1.0?package-id=9a1890ae72250762", "type": "library", "name": "github.com/kylelemons/godebug", "version": "v1.1.0", "cpe": "cpe:2.3:a:kylelemons:godebug:v1.1.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/kylelemons/godebug@v1.1.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4?package-id=f9e835bbb6c5625b", "type": "library", "name": "github.com/lestrrat-go/blackmagic", "version": "v1.0.4", "cpe": "cpe:2.3:a:lestrrat-go:blackmagic:v1.0.4:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:lestrrat_go:blackmagic:v1.0.4:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:lestrrat:blackmagic:v1.0.4:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:IwQibdnf8l2KoO+qC3uT4OaTWsW7tuRQXy9TRN9QanA=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/lestrrat-go/dsig@v1.2.1?package-id=de5cad7fa2f5b552", "type": "library", "name": "github.com/lestrrat-go/dsig", "version": "v1.2.1", "cpe": "cpe:2.3:a:lestrrat-go:dsig:v1.2.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/lestrrat-go/dsig@v1.2.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:lestrrat_go:dsig:v1.2.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:lestrrat:dsig:v1.2.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:MwxzZhE4+4fguHi+uDALKVlC3Cn+O1QU1Q/F8D7hVIc=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1?package-id=cfcd598c6323c264", "type": "library", "name": "github.com/lestrrat-go/httpcc", "version": "v1.0.1", "cpe": "cpe:2.3:a:lestrrat-go:httpcc:v1.0.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:lestrrat_go:httpcc:v1.0.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:lestrrat:httpcc:v1.0.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:ydWCStUeJLkpYyjLDHihupbn2tYmZ7m22BGkcvZZrIE=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.5?package-id=631dbdadd1221c99", "type": "library", "name": "github.com/lestrrat-go/httprc/v3", "version": "v3.0.5", "cpe": "cpe:2.3:a:lestrrat-go:httprc\\/v3:v3.0.5:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.5", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:lestrrat_go:httprc\\/v3:v3.0.5:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:lestrrat:httprc\\/v3:v3.0.5:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:S+Mb4L2I+bM6JGTibLmxExhyTOqnXjqx+zi9MoXw/TM=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.1.1?package-id=7c0ee11570070a17", "type": "library", "name": "github.com/lestrrat-go/jwx/v3", "version": "v3.1.1", "cpe": "cpe:2.3:a:lestrrat-go:jwx\\/v3:v3.1.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.1.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:lestrrat_go:jwx\\/v3:v3.1.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:lestrrat:jwx\\/v3:v3.1.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:yd9AdPmZ4INnQ7k42IrzXYpnEG803+SrQ6hdMvzHJzw=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0?package-id=0fe078ddd4ad7dd0", "type": "library", "name": "github.com/lestrrat-go/option/v2", "version": "v2.0.0", "cpe": "cpe:2.3:a:lestrrat-go:option\\/v2:v2.0.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:lestrrat_go:option\\/v2:v2.0.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:lestrrat:option\\/v2:v2.0.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:XxrcaJESE1fokHy3FpaQ/cXW8ZsIdWcdFzzLOcID3Ss=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/letsencrypt/boulder@v0.20260309.0?package-id=edccb36e878b49cf", "type": "library", "name": "github.com/letsencrypt/boulder", "version": "v0.20260309.0", "cpe": "cpe:2.3:a:letsencrypt:boulder:v0.20260309.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/letsencrypt/boulder@v0.20260309.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:kZynrxK3QfqLGx6hhoz+Rfs3hgltJs1p9Mp+4+VwnY0=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0?package-id=5a3aa8786f74bed2", "type": "library", "name": "github.com/mitchellh/go-homedir", "version": "v1.1.0", "cpe": "cpe:2.3:a:mitchellh:go-homedir:v1.1.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:mitchellh:go_homedir:v1.1.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1?package-id=914d6104a226a38c", "type": "library", "name": "github.com/mitchellh/go-wordwrap", "version": "v1.0.1", "cpe": "cpe:2.3:a:mitchellh:go-wordwrap:v1.0.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:mitchellh:go_wordwrap:v1.0.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:TLuKupo69TCn6TQSyGxwI1EblZZEsQ0vMlAFQflz0v0=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.1-0.20231216201459-8508981c8b6c?package-id=635bc398202f6638", "type": "library", "name": "github.com/mitchellh/mapstructure", "version": "v1.5.1-0.20231216201459-8508981c8b6c", "cpe": "cpe:2.3:a:mitchellh:mapstructure:v1.5.1-0.20231216201459-8508981c8b6c:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.1-0.20231216201459-8508981c8b6c", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:cqn374mizHuIWj+OSJCajGr/phAmuMug9qIX3l9CflE=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/moby/term@v0.5.2?package-id=d5529efbaf47914b", "type": "library", "name": "github.com/moby/term", "version": "v0.5.2", "cpe": "cpe:2.3:a:moby:term:v0.5.2:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/moby/term@v0.5.2", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:6qk3FJAFDs6i/q3W/pQ97SX192qKfZgGjCQqfCJkgzQ=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd?package-id=b0492a858b88ae9b", "type": "library", "name": "github.com/modern-go/concurrent", "version": "v0.0.0-20180306012644-bacd9c7ef1dd", "cpe": "cpe:2.3:a:modern-go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:modern_go:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:modern:concurrent:v0.0.0-20180306012644-bacd9c7ef1dd:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee?package-id=d29222f3d5e683b7", "type": "library", "name": "github.com/modern-go/reflect2", "version": "v1.0.3-0.20250322232337-35a7c28c31ee", "cpe": "cpe:2.3:a:modern-go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:modern_go:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:modern:reflect2:v1.0.3-0.20250322232337-35a7c28c31ee:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:W5t00kpgFdJifH4BDsTlE89Zl93FEloxaWZfGcifgq8=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/mozillazg/docker-credential-acr-helper@v0.4.0?package-id=b1fccacfdfdb2267", "type": "library", "name": "github.com/mozillazg/docker-credential-acr-helper", "version": "v0.4.0", "cpe": "cpe:2.3:a:mozillazg:docker-credential-acr-helper:v0.4.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/mozillazg/docker-credential-acr-helper@v0.4.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:mozillazg:docker_credential_acr_helper:v0.4.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:Uoh3Z9CcpEDnLiozDx+D7oDgRq7X+R296vAqAumnOcw=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?package-id=379a7f20e5553086", "type": "library", "name": "github.com/munnerz/goautoneg", "version": "v0.0.0-20191010083416-a7dc8b61c822", "cpe": "cpe:2.3:a:munnerz:goautoneg:v0.0.0-20191010083416-a7dc8b61c822:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/natefinch/atomic@v1.0.1?package-id=03f8acae9e6a8df8", "type": "library", "name": "github.com/natefinch/atomic", "version": "v1.0.1", "cpe": "cpe:2.3:a:natefinch:atomic:v1.0.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/natefinch/atomic@v1.0.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:ZPYKxkqQOx3KZ+RsbnP/YsgvxWQPGxjC0oBt2AhwV0A=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481?package-id=efd5e0d6d0b5bb84", "type": "library", "name": "github.com/nozzle/throttler", "version": "v0.0.0-20180817012639-2ea982251481", "cpe": "cpe:2.3:a:nozzle:throttler:v0.0.0-20180817012639-2ea982251481:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:Up6+btDp321ZG5/zdSLo48H9Iaq0UQGthrhWC6pCxzE=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/oklog/ulid/v2@v2.1.1?package-id=6ea918ed867c96d7", "type": "library", "name": "github.com/oklog/ulid/v2", "version": "v2.1.1", "cpe": "cpe:2.3:a:oklog:ulid\\/v2:v2.1.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/oklog/ulid/v2@v2.1.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:suPZ4ARWLOJLegGFiZZ1dFAkqzhMjL3J1TzI+5wHz8s=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/oleiade/reflections@v1.1.0?package-id=de174e1df334c221", "type": "library", "name": "github.com/oleiade/reflections", "version": "v1.1.0", "cpe": "cpe:2.3:a:oleiade:reflections:v1.1.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/oleiade/reflections@v1.1.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:D+I/UsXQB4esMathlt0kkZRJZdUDmhv5zGi/HOwYTWo=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/open-policy-agent/opa@v1.17.1?package-id=61d913d00e246694", "type": "library", "name": "github.com/open-policy-agent/opa", "version": "v1.17.1", "cpe": "cpe:2.3:a:open-policy-agent:opa:v1.17.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/open-policy-agent/opa@v1.17.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:open_policy_agent:opa:v1.17.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:open-policy:opa:v1.17.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:open_policy:opa:v1.17.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:open:opa:v1.17.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:wO0MOux/VCqY41aVAD6Toe1p3A7O7DlRZ1RHmYSpoS8=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0?package-id=bb953254e61ce30b", "type": "library", "name": "github.com/opencontainers/go-digest", "version": "v1.0.0", "cpe": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1?package-id=ed2e70761b2640d6", "type": "library", "name": "github.com/opencontainers/image-spec", "version": "v1.1.1", "cpe": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:y0fUlFfIZhPF1W537XOLg0/fcx6zcHCJwooC2xJA040=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/pborman/uuid@v1.2.1?package-id=4399776f0dc1dfc5", "type": "library", "name": "github.com/pborman/uuid", "version": "v1.2.1", "cpe": "cpe:2.3:a:pborman:uuid:v1.2.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/pborman/uuid@v1.2.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:+ZZIw58t/ozdjRaXh/3awHfmWRbzYxJoAdNJxe/3pvw=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/pelletier/go-toml/v2@v2.2.4?package-id=83861b6444287688", "type": "library", "name": "github.com/pelletier/go-toml/v2", "version": "v2.2.4", "cpe": "cpe:2.3:a:pelletier:go-toml\\/v2:v2.2.4:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/pelletier/go-toml/v2@v2.2.4", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:pelletier:go_toml\\/v2:v2.2.4:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:mye9XuhQ6gvn5h28+VilKrrPoQVanw5PMw/TB0t5Ec4=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c?package-id=f1c4650d35db5ca8", "type": "library", "name": "github.com/pkg/browser", "version": "v0.0.0-20240102092130-5ac0b6a4141c", "cpe": "cpe:2.3:a:pkg:browser:v0.0.0-20240102092130-5ac0b6a4141c:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:+mdjkGKdHQG3305AYmdv1U2eRNDiU2ErMBj1gwrq8eQ=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/pkg/errors@v0.9.1?package-id=8b01468316505e72", "type": "library", "name": "github.com/pkg/errors", "version": "v0.9.1", "cpe": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/pkg/errors@v0.9.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/protocolbuffers/txtpbfmt@v0.0.0-20260217160748-a481f6a22f94?package-id=705f5eccc5df187d", "type": "library", "name": "github.com/protocolbuffers/txtpbfmt", "version": "v0.0.0-20260217160748-a481f6a22f94", "cpe": "cpe:2.3:a:protocolbuffers:txtpbfmt:v0.0.0-20260217160748-a481f6a22f94:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/protocolbuffers/txtpbfmt@v0.0.0-20260217160748-a481f6a22f94", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:2PC6Ql3jipz1KvBlqUHjjk6v4aMwE86mfDu1XMH0LR8=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9?package-id=ee1493ee0efcaacc", "type": "library", "name": "github.com/rcrowley/go-metrics", "version": "v0.0.0-20250401214520-65e299d6c5c9", "cpe": "cpe:2.3:a:rcrowley:go-metrics:v0.0.0-20250401214520-65e299d6c5c9:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:rcrowley:go_metrics:v0.0.0-20250401214520-65e299d6c5c9:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:bsUq1dX0N8AOIL7EB/X911+m4EHsnWEHeJ0c+3TTBrg=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/rogpeppe/go-internal@v1.14.1?package-id=4fa27e07e5de404a", "type": "library", "name": "github.com/rogpeppe/go-internal", "version": "v1.14.1", "cpe": "cpe:2.3:a:rogpeppe:go-internal:v1.14.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/rogpeppe/go-internal@v1.14.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:rogpeppe:go_internal:v1.14.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/ryanuber/go-glob@v1.0.0?package-id=f59ded7721a60035", "type": "library", "name": "github.com/ryanuber/go-glob", "version": "v1.0.0", "cpe": "cpe:2.3:a:ryanuber:go-glob:v1.0.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/ryanuber/go-glob@v1.0.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:ryanuber:go_glob:v1.0.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:iQh3xXAumdQ+4Ufa5b25cRpC5TYKlno6hsv6Cb3pkBk=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0?package-id=655dfba39bcc58d7", "type": "library", "name": "github.com/sagikazarmark/locafero", "version": "v0.11.0", "cpe": "cpe:2.3:a:sagikazarmark:locafero:v0.11.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:1iurJgmM9G3PA/I+wWYIOw/5SyBtxapeHDcg+AAIFXc=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/sassoftware/relic@v7.2.1%2Bincompatible?package-id=20f3382034947866", "type": "library", "name": "github.com/sassoftware/relic", "version": "v7.2.1+incompatible", "cpe": "cpe:2.3:a:sassoftware:relic:v7.2.1\\+incompatible:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/sassoftware/relic@v7.2.1%2Bincompatible", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:Pwyh1F3I0r4clFJXkSI8bOyJINGqpgjJU3DYAZeI05A=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.0?package-id=c16bd5409a3e0fe3", "type": "library", "name": "github.com/secure-systems-lab/go-securesystemslib", "version": "v0.11.0", "cpe": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:secure:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:secure:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:iuCR9kcMFD4QurdKrGvPLoKZLv9YvwPYVr0473BdtFs=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0?package-id=7c719d48b0d88e84", "type": "library", "name": "github.com/shibumi/go-pathspec", "version": "v1.3.0", "cpe": "cpe:2.3:a:shibumi:go-pathspec:v1.3.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:shibumi:go_pathspec:v1.3.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:QUyMZhFo0Md5B8zV8x2tesohbb5kfbpTi9rBnKh5dkI=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/sigstore/cosign/v3@v3.1.3?package-id=af1248075d014df2", "type": "library", "name": "github.com/sigstore/cosign/v3", "version": "v3.1.3", "cpe": "cpe:2.3:a:sigstore:cosign\\/v3:v3.1.3:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/sigstore/cosign/v3@v3.1.3", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1?package-id=9910ec30221d6b3c", "type": "library", "name": "github.com/sigstore/protobuf-specs", "version": "v0.5.1", "cpe": "cpe:2.3:a:sigstore:protobuf-specs:v0.5.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:sigstore:protobuf_specs:v0.5.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:/5OPaNuolRJmQfeZLayJGFXMpsRJEdgC6ah1/+7Px7U=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/sigstore/rekor@v1.5.3?package-id=4d51b0cb4274cbc5", "type": "library", "name": "github.com/sigstore/rekor", "version": "v1.5.3", "cpe": "cpe:2.3:a:sigstore:rekor:v1.5.3:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/sigstore/rekor@v1.5.3", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:0Tyolw3zreRgm7PUW8dccFLXGBThi08278jI8EXNSr4=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/sigstore/rekor-tiles/v2@v2.3.0?package-id=17602fc3018d25c3", "type": "library", "name": "github.com/sigstore/rekor-tiles/v2", "version": "v2.3.0", "cpe": "cpe:2.3:a:sigstore:rekor-tiles\\/v2:v2.3.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/sigstore/rekor-tiles/v2@v2.3.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:sigstore:rekor_tiles\\/v2:v2.3.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:HhMgH61UP0t899V8Fjt7pz1YdgOBptbaQdnCF+79cdc=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/sigstore/sigstore@v1.10.8?package-id=bc115db5a2a8c525", "type": "library", "name": "github.com/sigstore/sigstore", "version": "v1.10.8", "cpe": "cpe:2.3:a:sigstore:sigstore:v1.10.8:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/sigstore/sigstore@v1.10.8", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:1Mgkxvkw4AXMfIP1DOjc6kw0GkUgA8pGVpveN/EfOq4=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/sigstore/sigstore-go@v1.2.2?package-id=b589a5fc4b15278b", "type": "library", "name": "github.com/sigstore/sigstore-go", "version": "v1.2.2", "cpe": "cpe:2.3:a:sigstore:sigstore-go:v1.2.2:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/sigstore/sigstore-go@v1.2.2", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:sigstore:sigstore_go:v1.2.2:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:xAJ8hxaoecC0HKBYVbrwUjkeAI+GJYu6vLqbxDlD2Q0=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/aws@v1.10.8?package-id=f0e2d5fbd40d0cb1", "type": "library", "name": "github.com/sigstore/sigstore/pkg/signature/kms/aws", "version": "v1.10.8", "cpe": "cpe:2.3:a:sigstore:sigstore\\/pkg\\/signature\\/kms\\/aws:v1.10.8:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/aws@v1.10.8", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:tofVQ+UWJgad/69I5zbqxdFCN5gpIn9tRQP7iBzIpBw=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/azure@v1.10.8?package-id=5693d211b3108f70", "type": "library", "name": "github.com/sigstore/sigstore/pkg/signature/kms/azure", "version": "v1.10.8", "cpe": "cpe:2.3:a:sigstore:sigstore\\/pkg\\/signature\\/kms\\/azure:v1.10.8:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/azure@v1.10.8", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:8Mt7J36GcUEmbiJaiFhz2tud5ZIgkfVVCe2H/WJCHmw=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/gcp@v1.10.8?package-id=770c394a5895a16f", "type": "library", "name": "github.com/sigstore/sigstore/pkg/signature/kms/gcp", "version": "v1.10.8", "cpe": "cpe:2.3:a:sigstore:sigstore\\/pkg\\/signature\\/kms\\/gcp:v1.10.8:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/gcp@v1.10.8", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:MxpAIMZVzn0Tpbarc9ax1I498oQBp7oYSMgoMSsOmKI=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/hashivault@v1.10.8?package-id=e77bd4b7daa99bbd", "type": "library", "name": "github.com/sigstore/sigstore/pkg/signature/kms/hashivault", "version": "v1.10.8", "cpe": "cpe:2.3:a:sigstore:sigstore\\/pkg\\/signature\\/kms\\/hashivault:v1.10.8:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/hashivault@v1.10.8", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:1DGe4/clcdOnkz5MINEczWlmEvjUtZd+AjPPT/cBhQ8=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/sigstore/timestamp-authority/v2@v2.1.2?package-id=be2c8e7e491363aa", "type": "library", "name": "github.com/sigstore/timestamp-authority/v2", "version": "v2.1.2", "cpe": "cpe:2.3:a:sigstore:timestamp-authority\\/v2:v2.1.2:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/sigstore/timestamp-authority/v2@v2.1.2", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:sigstore:timestamp_authority\\/v2:v2.1.2:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:7DDhnknLL4w8VwomyvW2W8qblOS9LDR8oihna+jc7Ls=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/sirupsen/logrus@v1.9.4?package-id=8c959fd0895376c8", "type": "library", "name": "github.com/sirupsen/logrus", "version": "v1.9.4", "cpe": "cpe:2.3:a:turbopuffer:logrus:v1.9.4:*:*:*:*:go:*:*", "purl": "pkg:golang/github.com/sirupsen/logrus@v1.9.4", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:TsZE7l11zFCLZnZ+teH4Umoq5BhEIfIzfRDZ1Uzql2w=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8?package-id=d1c0abbb23fdbe37", "type": "library", "name": "github.com/sourcegraph/conc", "version": "v0.3.1-0.20240121214520-5f936abd7ae8", "cpe": "cpe:2.3:a:sourcegraph:conc:v0.3.1-0.20240121214520-5f936abd7ae8:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:+jumHNA0Wrelhe64i8F6HNlS8pkoyMv5sreGx2Ry5Rw=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/spf13/afero@v1.15.0?package-id=5070b17421b7d4d7", "type": "library", "name": "github.com/spf13/afero", "version": "v1.15.0", "cpe": "cpe:2.3:a:spf13:afero:v1.15.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/spf13/afero@v1.15.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:b/YBCLWAJdFWJTN9cLhiXXcD7mzKn9Dm86dNnfyQw1I=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/spf13/cast@v1.10.0?package-id=d5f51cfeeef44136", "type": "library", "name": "github.com/spf13/cast", "version": "v1.10.0", "cpe": "cpe:2.3:a:spf13:cast:v1.10.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/spf13/cast@v1.10.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:h2x0u2shc1QuLHfxi+cTJvs30+ZAHOGRic8uyGTDWxY=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/spf13/cobra@v1.10.2?package-id=071c034e8d34e039", "type": "library", "name": "github.com/spf13/cobra", "version": "v1.10.2", "cpe": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/spf13/cobra@v1.10.2", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:DMTTonx5m65Ic0GOoRY2c16WCbHxOOw6xxezuLaBpcU=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.10?package-id=0efef7414e92f8a7", "type": "library", "name": "github.com/spf13/pflag", "version": "v1.0.10", "cpe": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/spf13/pflag@v1.0.10", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/spf13/viper@v1.21.0?package-id=7ac8ca732537d303", "type": "library", "name": "github.com/spf13/viper", "version": "v1.21.0", "cpe": "cpe:2.3:a:spf13:viper:v1.21.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/spf13/viper@v1.21.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:x5S+0EU27Lbphp4UKm1C+1oQO+rKx36vfCoaVebLFSU=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.7.0?package-id=ead0acbbb27ad216", "type": "library", "name": "github.com/spiffe/go-spiffe/v2", "version": "v2.7.0", "cpe": "cpe:2.3:a:spiffe:go-spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.7.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:spiffe:go_spiffe\\/v2:v2.7.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:uXe1MflJoHw58wAUvxVlcM7WpKtijWG7I1UidcGh6g4=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/subosito/gotenv@v1.6.0?package-id=f1407e529ec8cf43", "type": "library", "name": "github.com/subosito/gotenv", "version": "v1.6.0", "cpe": "cpe:2.3:a:subosito:gotenv:v1.6.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/subosito/gotenv@v1.6.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/syndtr/goleveldb@v1.0.1-0.20220721030215-126854af5e6d?package-id=8e0e937c344d5244", "type": "library", "name": "github.com/syndtr/goleveldb", "version": "v1.0.1-0.20220721030215-126854af5e6d", "cpe": "cpe:2.3:a:syndtr:goleveldb:v1.0.1-0.20220721030215-126854af5e6d:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/syndtr/goleveldb@v1.0.1-0.20220721030215-126854af5e6d", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:vfofYNRScrDdvS342BElfbETmL1Aiz3i2t0zfRj16Hs=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3?package-id=57d69defd88ae203", "type": "library", "name": "github.com/tchap/go-patricia/v2", "version": "v2.3.3", "cpe": "cpe:2.3:a:tchap:go-patricia\\/v2:v2.3.3:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:tchap:go_patricia\\/v2:v2.3.3:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:xfNEsODumaEcCcY3gI0hYPZ/PcpVv5ju6RMAhgwZDDc=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0?package-id=500479ed66466bb1", "type": "library", "name": "github.com/theupdateframework/go-tuf", "version": "v0.7.0", "cpe": "cpe:2.3:a:theupdateframework:go-tuf:v0.7.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:theupdateframework:go_tuf:v0.7.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:CqbQFrWo1ae3/I0UCblSbczevCCbS31Qvs5LdxRWqRI=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/theupdateframework/go-tuf/v2@v2.4.2?package-id=734096f2ccd1bbf7", "type": "library", "name": "github.com/theupdateframework/go-tuf/v2", "version": "v2.4.2", "cpe": "cpe:2.3:a:theupdateframework:go-tuf\\/v2:v2.4.2:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/theupdateframework/go-tuf/v2@v2.4.2", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:theupdateframework:go_tuf\\/v2:v2.4.2:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:w7976/W8uTwlsegP5nRymlpjPgrwSh+AXUf85is6nJk=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/titanous/rocacheck@v0.0.0-20171023193734-afe73141d399?package-id=31114f300e4fa288", "type": "library", "name": "github.com/titanous/rocacheck", "version": "v0.0.0-20171023193734-afe73141d399", "cpe": "cpe:2.3:a:titanous:rocacheck:v0.0.0-20171023193734-afe73141d399:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/titanous/rocacheck@v0.0.0-20171023193734-afe73141d399", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:e/5i7d4oYZ+C1wj2THlRK+oAhjeS/TRQwMfkIuet3w0=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/tjfoc/gmsm@v1.4.1?package-id=9736551677964d71", "type": "library", "name": "github.com/tjfoc/gmsm", "version": "v1.4.1", "cpe": "cpe:2.3:a:tjfoc:gmsm:v1.4.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/tjfoc/gmsm@v1.4.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:aMe1GlZb+0bLjn+cKTPEvvn9oUEBlJitaZiiBwsbgho=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/transparency-dev/formats@v0.1.1?package-id=e57e257309f1b734", "type": "library", "name": "github.com/transparency-dev/formats", "version": "v0.1.1", "cpe": "cpe:2.3:a:transparency-dev:formats:v0.1.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/transparency-dev/formats@v0.1.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:transparency_dev:formats:v0.1.1:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:transparency:formats:v0.1.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:4bVHJc+KdBgpA1OJD1yjI+g0i5Z1graCppTMH8lWKJI=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/transparency-dev/merkle@v0.0.2?package-id=d8636abbe60be7db", "type": "library", "name": "github.com/transparency-dev/merkle", "version": "v0.0.2", "cpe": "cpe:2.3:a:transparency-dev:merkle:v0.0.2:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/transparency-dev/merkle@v0.0.2", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:transparency_dev:merkle:v0.0.2:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:transparency:merkle:v0.0.2:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:Q9nBoQcZcgPamMkGn7ghV8XiTZ/kRxn1yCG81+twTK4=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/valyala/fastjson@v1.6.10?package-id=3a7e004c1361d140", "type": "library", "name": "github.com/valyala/fastjson", "version": "v1.6.10", "cpe": "cpe:2.3:a:valyala:fastjson:v1.6.10:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/valyala/fastjson@v1.6.10", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:/yjJg8jaVQdYR3arGxPE2X5z89xrlhS0eGXdv+ADTh4=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.33?package-id=4d6423eff828ca7e", "type": "library", "name": "github.com/vektah/gqlparser/v2", "version": "v2.5.33", "cpe": "cpe:2.3:a:vektah:gqlparser\\/v2:v2.5.33:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.33", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:lRp8aIeNUNbimf/axZd7ETg24q06hBtPaas+TcvI/7E=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/withfig/autocomplete-tools/integrations/cobra@v1.2.1?package-id=c4f3d53469fb41e6", "type": "library", "name": "github.com/withfig/autocomplete-tools/integrations/cobra", "version": "v1.2.1", "cpe": "cpe:2.3:a:withfig:autocomplete-tools\\/integrations\\/cobra:v1.2.1:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/withfig/autocomplete-tools/integrations/cobra@v1.2.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:withfig:autocomplete_tools\\/integrations\\/cobra:v1.2.1:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:+dBg5k7nuTE38VVdoroRsT0Z88fmvdYrI2EjzJst35I=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/x448/float16@v0.8.4?package-id=0cb6b572a6fad448", "type": "library", "name": "github.com/x448/float16", "version": "v0.8.4", "cpe": "cpe:2.3:a:x448:float16:v0.8.4:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/x448/float16@v0.8.4", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb?package-id=69c561b61bfffc86", "type": "library", "name": "github.com/xeipuuv/gojsonpointer", "version": "v0.0.0-20190905194746-02993c407bfb", "cpe": "cpe:2.3:a:xeipuuv:gojsonpointer:v0.0.0-20190905194746-02993c407bfb:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:zGWFAtiMcyryUHoUjUJX0/lt1H2+i2Ka2n+D3DImSNo=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?package-id=a108dd8e7a5dd789", "type": "library", "name": "github.com/xeipuuv/gojsonreference", "version": "v0.0.0-20180127040603-bd5ef7bd5415", "cpe": "cpe:2.3:a:xeipuuv:gojsonreference:v0.0.0-20180127040603-bd5ef7bd5415:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:EzJWgHovont7NscjpAxXsDA8S8BMYve8Y5+7cuRE7R0=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0?package-id=9fa5883eb147b6d6", "type": "library", "name": "github.com/yashtewari/glob-intersection", "version": "v0.2.0", "cpe": "cpe:2.3:a:yashtewari:glob-intersection:v0.2.0:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:yashtewari:glob_intersection:v0.2.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:8iuHdN88yYuCzCdjt0gDe+6bAhUwBeEWqThExu54RFg=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78?package-id=96212e2c50a7f772", "type": "library", "name": "github.com/youmark/pkcs8", "version": "v0.0.0-20240726163527-a2c0da244d78", "cpe": "cpe:2.3:a:youmark:pkcs8:v0.0.0-20240726163527-a2c0da244d78:*:*:*:*:*:*:*", "purl": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:ilQV1hzziu+LLM3zUTJ0trRztfwgjqKnBWNtSRkbmwM=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/gitlab.com/gitlab-org/api/client-go@v1.46.0?package-id=77d6a70ac9a95f9e", "type": "library", "name": "gitlab.com/gitlab-org/api/client-go", "version": "v1.46.0", "cpe": "cpe:2.3:a:gitlab-org:api\\/client-go:v1.46.0:*:*:*:*:*:*:*", "purl": "pkg:golang/gitlab.com/gitlab-org/api/client-go@v1.46.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:gitlab-org:api\\/client_go:v1.46.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:gitlab_org:api\\/client-go:v1.46.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:gitlab_org:api\\/client_go:v1.46.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:gitlab:api\\/client-go:v1.46.0:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:gitlab:api\\/client_go:v1.46.0:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:YxBWFZIFYKcGESCb9fpkwzouo+apyB9pr/XTWzNoL24=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1?package-id=3cb8b0d0cf4688a8", "type": "library", "name": "go.opentelemetry.io/auto/sdk", "version": "v1.2.1", "cpe": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*", "purl": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.68.0?package-id=e36929cfae3fb528", "type": "library", "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc", "version": "v0.68.0", "cpe": "cpe:2.3:a:contrib:instrumentation\\/google.golang.org\\/grpc\\/otelgrpc:v0.68.0:*:*:*:*:*:*:*", "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.68.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:0Qx7VGBacMm9ZENQ7TnNObTYI4ShC+lHI16seduaxZo=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.68.0?package-id=1f9cb2364f03d6b9", "type": "library", "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "version": "v0.68.0", "cpe": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.68.0:*:*:*:*:*:*:*", "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.68.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:CqXxU8VOmDefoh0+ztfGaymYbhdB/tT3zs79QaZTNGY=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/go.opentelemetry.io/otel@v1.44.0?package-id=c95beaae1082257c", "type": "library", "name": "go.opentelemetry.io/otel", "version": "v1.44.0", "cpe": "cpe:2.3:a:opentelemetry:opentelemetry:v1.44.0:*:*:*:*:go:*:*", "purl": "pkg:golang/go.opentelemetry.io/otel@v1.44.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:JjwHmHpA4iZ3wBxluu2fbbE7j4kqlE8jXyAyPXH7HqU=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0?package-id=b6ba47d54ed8499d", "type": "library", "name": "go.opentelemetry.io/otel/metric", "version": "v1.44.0", "cpe": "cpe:2.3:a:otel:metric:v1.44.0:*:*:*:*:*:*:*", "purl": "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:1w0gILTcHdr3YI+ixLyjemwrVnsMURbTZFrSYCdDdmc=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0?package-id=c3a8adb30e12a98e", "type": "library", "name": "go.opentelemetry.io/otel/trace", "version": "v1.44.0", "cpe": "cpe:2.3:a:otel:trace:v1.44.0:*:*:*:*:*:*:*", "purl": "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:jxF5CsGYCe74MCRx2X4g7WsY/VBKRqqpNvXlX/6gtIk=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/go.uber.org/multierr@v1.11.0?package-id=366da7cd0db28324", "type": "library", "name": "go.uber.org/multierr", "version": "v1.11.0", "purl": "pkg:golang/go.uber.org/multierr@v1.11.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/go.uber.org/zap@v1.28.0?package-id=e4de23795492f806", "type": "library", "name": "go.uber.org/zap", "version": "v1.28.0", "purl": "pkg:golang/go.uber.org/zap@v1.28.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:IZzaP1Fv73/T/pBMLk4VutPl36uNC+OSUh3JLG3FIjo=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4?package-id=4b8c431b47e44a45", "type": "library", "name": "go.yaml.in/yaml/v2", "version": "v2.4.4", "cpe": "cpe:2.3:a:yaml:v2:v2.4.4:*:*:*:*:*:*:*", "purl": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/go.yaml.in/yaml/v3@v3.0.4?package-id=f547101fbf01b089", "type": "library", "name": "go.yaml.in/yaml/v3", "version": "v3.0.4", "cpe": "cpe:2.3:a:yaml:v3:v3.0.4:*:*:*:*:*:*:*", "purl": "pkg:golang/go.yaml.in/yaml/v3@v3.0.4", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/golang.org/x/crypto@v0.53.0?package-id=fc040067debf8ebc", "type": "library", "name": "golang.org/x/crypto", "version": "v0.53.0", "cpe": "cpe:2.3:a:golang:crypto:v0.53.0:*:*:*:*:go:*:*", "purl": "pkg:golang/golang.org/x/crypto@v0.53.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:go:ssh:v0.53.0:*:*:*:*:go:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:QZ4Muo8THX6CizN2vPPd5fBGHyogrdK9fG4wLPFUsto=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/golang.org/x/mod@v0.37.0?package-id=17c66526bef668a6", "type": "library", "name": "golang.org/x/mod", "version": "v0.37.0", "cpe": "cpe:2.3:a:golang:x\\/mod:v0.37.0:*:*:*:*:*:*:*", "purl": "pkg:golang/golang.org/x/mod@v0.37.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:vF1DjpVEshcIqoEaauuHebaLk1O1forxjxBaVn884JQ=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/golang.org/x/net@v0.56.0?package-id=46101e2b7cb51032", "type": "library", "name": "golang.org/x/net", "version": "v0.56.0", "cpe": "cpe:2.3:a:golang:networking:v0.56.0:*:*:*:*:go:*:*", "purl": "pkg:golang/golang.org/x/net@v0.56.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:golang:net:v0.56.0:*:*:*:*:go:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:Rw8j/hFzGvJUZwNBXnAtf5sVDVt+65SK2C7IxCxZt5o=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.36.0?package-id=fe9d78c21b2b3609", "type": "library", "name": "golang.org/x/oauth2", "version": "v0.36.0", "cpe": "cpe:2.3:a:golang:x\\/oauth2:v0.36.0:*:*:*:*:*:*:*", "purl": "pkg:golang/golang.org/x/oauth2@v0.36.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/golang.org/x/sync@v0.21.0?package-id=c0d4007f48859478", "type": "library", "name": "golang.org/x/sync", "version": "v0.21.0", "cpe": "cpe:2.3:a:golang:x\\/sync:v0.21.0:*:*:*:*:*:*:*", "purl": "pkg:golang/golang.org/x/sync@v0.21.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:HLII4xRRTtCRkxYp4HNFF0Js/Og6q2i++KXbg0gHCwM=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/golang.org/x/sys@v0.46.0?package-id=f8c8a7541eb8e5bf", "type": "library", "name": "golang.org/x/sys", "version": "v0.46.0", "cpe": "cpe:2.3:a:golang:x\\/sys:v0.46.0:*:*:*:*:*:*:*", "purl": "pkg:golang/golang.org/x/sys@v0.46.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:noSf2Fq6F8DBgS+LysIkx7rIExoNHJsxOAtPp4rthXw=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/golang.org/x/term@v0.44.0?package-id=4f7e674e52d6be98", "type": "library", "name": "golang.org/x/term", "version": "v0.44.0", "cpe": "cpe:2.3:a:golang:x\\/term:v0.44.0:*:*:*:*:*:*:*", "purl": "pkg:golang/golang.org/x/term@v0.44.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:0rLvDRCtNj0gZkyIXhCyOb2OAzEhLVqc4B+hrsBhrmc=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/golang.org/x/text@v0.38.0?package-id=d175a2dfc40dadab", "type": "library", "name": "golang.org/x/text", "version": "v0.38.0", "cpe": "cpe:2.3:a:golang:text:v0.38.0:*:*:*:*:*:*:*", "purl": "pkg:golang/golang.org/x/text@v0.38.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:sXmwo9DwP3OK9EZ7PqAdaooSGozfl/3a6/xJcbzPRhE=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/golang.org/x/time@v0.15.0?package-id=861ab93bcdf7c9d0", "type": "library", "name": "golang.org/x/time", "version": "v0.15.0", "cpe": "cpe:2.3:a:golang:x\\/time:v0.15.0:*:*:*:*:*:*:*", "purl": "pkg:golang/golang.org/x/time@v0.15.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/google.golang.org/api@v0.284.0?package-id=f6f379c88a9b7f7f", "type": "library", "name": "google.golang.org/api", "version": "v0.284.0", "cpe": "cpe:2.3:a:google:api:v0.284.0:*:*:*:*:*:*:*", "purl": "pkg:golang/google.golang.org/api@v0.284.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:i+cKTgeQRcRySkP7QTl5PDO7/pAm8EcMFIUMlNbk4Vc=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20260406210006-6f92a3bedf2d?package-id=b89b348e583177e8", "type": "library", "name": "google.golang.org/genproto", "version": "v0.0.0-20260406210006-6f92a3bedf2d", "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20260406210006-6f92a3bedf2d:*:*:*:*:*:*:*", "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20260406210006-6f92a3bedf2d", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:N1Ec54vZnIPd7MnxRiYLW+oY4fDR4BOS/LrssdD9+ek=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260526163538-3dc84a4a5aaa?package-id=45dd1121d35da4a4", "type": "library", "name": "google.golang.org/genproto/googleapis/api", "version": "v0.0.0-20260526163538-3dc84a4a5aaa", "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*", "purl": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260526163538-3dc84a4a5aaa", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:Kjn0N0tCrDgiAFW+lGO4JZ3ck44CehvJQMAwj9QF0G8=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260526163538-3dc84a4a5aaa?package-id=fb2b07def0c8c6a5", "type": "library", "name": "google.golang.org/genproto/googleapis/rpc", "version": "v0.0.0-20260526163538-3dc84a4a5aaa", "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*", "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260526163538-3dc84a4a5aaa", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:mZHHdPZl0dbGHCflZgAq/Q468DWVFcU2whhB2KAo8fk=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/google.golang.org/grpc@v1.82.0?package-id=665ca92380c6bc29", "type": "library", "name": "google.golang.org/grpc", "version": "v1.82.0", "cpe": "cpe:2.3:a:google:grpc:v1.82.0:*:*:*:*:*:*:*", "purl": "pkg:golang/google.golang.org/grpc@v1.82.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:vguDnZUPjE26w09A63VoxZPnvPjB5Riyc0mkXPFmAIU=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.36.12-0.20260120151049-f2248ac996af?package-id=0a752e43d33fd0ed", "type": "library", "name": "google.golang.org/protobuf", "version": "v1.36.12-0.20260120151049-f2248ac996af", "cpe": "cpe:2.3:a:google:protobuf:v1.36.12-0.20260120151049-f2248ac996af:*:*:*:*:*:*:*", "purl": "pkg:golang/google.golang.org/protobuf@v1.36.12-0.20260120151049-f2248ac996af", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:+5/Sw3GsDNlEmu7TfklWKPdQ0Ykja5VEmq2i817+jbI=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0?package-id=e825b3f6e4a4021a", "type": "library", "name": "gopkg.in/evanphx/json-patch.v4", "version": "v4.13.0", "purl": "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:czT3CmqEaQ1aanPc5SdlgQrrEIb8w/wwCvWWnfEbYzo=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/gopkg.in/inf.v0@v0.9.1?package-id=8e7075a976a817ba", "type": "library", "name": "gopkg.in/inf.v0", "version": "v0.9.1", "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/gopkg.in/ini.v1@v1.67.3?package-id=683f6f022d069c50", "type": "library", "name": "gopkg.in/ini.v1", "version": "v1.67.3", "purl": "pkg:golang/gopkg.in/ini.v1@v1.67.3", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:iM9Lhz5MRSGhHVGGwCuzG9KO8PoirCXj/m/qTmOJJQw=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=be145a35051c02fc", "type": "library", "name": "gopkg.in/yaml.v3", "version": "v3.0.1", "cpe": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*", "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/k8s.io/api@v0.36.2?package-id=274e650c02109f95", "type": "library", "name": "k8s.io/api", "version": "v0.36.2", "purl": "pkg:golang/k8s.io/api@v0.36.2", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:TF6YDLIzKfccK7cq9YpTcGX8TJmEkHVRv78DM51fRYY=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.36.2?package-id=a7f9ff4bedccb3e7", "type": "library", "name": "k8s.io/apimachinery", "version": "v0.36.2", "purl": "pkg:golang/k8s.io/apimachinery@v0.36.2", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:0PE/W/WNy1UX61NLbXY5TMbJ6UwLL6E6lAPkYrKFxbQ=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/k8s.io/client-go@v0.36.2?package-id=a7c5dceeeef3eb89", "type": "library", "name": "k8s.io/client-go", "version": "v0.36.2", "purl": "pkg:golang/k8s.io/client-go@v0.36.2", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:bfgxmFKc9CgqsgX4xKLAAdmTQlWee7Ob/HlDOrJ5TBI=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/k8s.io/klog/v2@v2.140.0?package-id=47717988fec74b0e", "type": "library", "name": "k8s.io/klog/v2", "version": "v2.140.0", "cpe": "cpe:2.3:a:klog:v2:v2.140.0:*:*:*:*:*:*:*", "purl": "pkg:golang/k8s.io/klog/v2@v2.140.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:Tf+J3AH7xnUzZyVVXhTgGhEKnFqye14aadWv7bzXdzc=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20260317180543-43fb72c5454a?package-id=20fbeb0f868f8372", "type": "library", "name": "k8s.io/kube-openapi", "version": "v0.0.0-20260317180543-43fb72c5454a", "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20260317180543-43fb72c5454a", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:xCeOEAOoGYl2jnJoHkC3hkbPJgdATINPMAxaynU2Ovg=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20260210185600-b8788abfbbc2?package-id=e4dd313bffcc02df", "type": "library", "name": "k8s.io/utils", "version": "v0.0.0-20260210185600-b8788abfbbc2", "purl": "pkg:golang/k8s.io/utils@v0.0.0-20260210185600-b8788abfbbc2", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:AZYQSJemyQB5eRxqcPky+/7EdBj0xi3g0ZcxxJ7vbWU=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730?package-id=082493fc30e5cd24", "type": "library", "name": "sigs.k8s.io/json", "version": "v0.0.0-20250730193827-2d320260d730", "purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:IpInykpT6ceI+QxKBbEflcR5EXP7sU1kvOlxwZh5txg=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/sigs.k8s.io/randfill@v1.0.0?package-id=70bdd0f8de3862e1", "type": "library", "name": "sigs.k8s.io/randfill", "version": "v1.0.0", "purl": "pkg:golang/sigs.k8s.io/randfill@v1.0.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:JfjMILfT8A6RbawdsK2JXGBR5AQVfd+9TbzrlneTyrU=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/sigs.k8s.io/release-utils@v0.12.4?package-id=c453be9674465e0d", "type": "library", "name": "sigs.k8s.io/release-utils", "version": "v0.12.4", "purl": "pkg:golang/sigs.k8s.io/release-utils@v0.12.4", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:kuG6WTWGCKx5uUrJwl2uFErOKOw+4Ba8WrPmOQh5J3g=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.2?package-id=8f37f6ab0d5fb811", "type": "library", "name": "sigs.k8s.io/structured-merge-diff/v6", "version": "v6.3.2", "cpe": "cpe:2.3:a:structured-merge-diff:v6:v6.3.2:*:*:*:*:*:*:*", "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.2", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:structured_merge_diff:v6:v6.3.2:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:structured-merge:v6:v6.3.2:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:structured_merge:v6:v6.3.2:*:*:*:*:*:*:*" }, { "name": "syft:cpe23", "value": "cpe:2.3:a:structured:v6:v6.3.2:*:*:*:*:*:*:*" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:kwVWMx5yS1CrnFWA/2QHyRVJ8jM6dBA80uLmm0wJkk8=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/sigs.k8s.io/yaml@v1.6.0?package-id=70cb5e699caec9d6", "type": "library", "name": "sigs.k8s.io/yaml", "version": "v1.6.0", "purl": "pkg:golang/sigs.k8s.io/yaml@v1.6.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:architecture", "value": "arm64" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" }, { "name": "syft:metadata:h1Digest", "value": "h1:G8fkbMSAFqgEFgh4b1wmtzDnioxFCUgTZhlbj5P9QYs=" }, { "name": "syft:metadata:mainModule", "value": "github.com/sigstore/cosign/v3" } ] }, { "bom-ref": "pkg:golang/stdlib@1.27.0?package-id=20e22cd40a04f35e", "type": "library", "name": "stdlib", "version": "go1.27.0", "licenses": [ { "license": { "id": "BSD-3-Clause" } } ], "cpe": "cpe:2.3:a:golang:go:1.27.0:-:*:*:*:*:*:*", "purl": "pkg:golang/stdlib@1.27.0", "properties": [ { "name": "syft:package:foundBy", "value": "go-module-binary-cataloger" }, { "name": "syft:package:language", "value": "go" }, { "name": "syft:package:type", "value": "go-module" }, { "name": "syft:package:metadataType", "value": "go-module-buildinfo-entry" }, { "name": "syft:location:0:layerID", "value": "sha256:82e29bf7ed08e2bcf8751f0c9e435e7833ae93a4865ba239d5add64aee830a35" }, { "name": "syft:location:0:path", "value": "/bin/cosign" }, { "name": "syft:metadata:goCompiledVersion", "value": "go1.27.0" } ] } ], "dependencies": [ { "ref": "pkg:golang/github.com/sigstore/cosign/v3@v3.1.3?package-id=af1248075d014df2", "dependsOn": [ "pkg:golang/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go@v1.36.11-20260415201107-50325440f8f2.1?package-id=af4cad2275b45808", "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8?package-id=06491cc1ebe52099", "pkg:golang/cloud.google.com/go/auth@v0.20.0?package-id=8acc457bdfabcd11", "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0?package-id=1d413807968d638d", "pkg:golang/cloud.google.com/go/iam@v1.11.0?package-id=a2b6a1c21749c2f9", "pkg:golang/cloud.google.com/go/kms@v1.31.0?package-id=c943cf024de14a73", "pkg:golang/cloud.google.com/go/longrunning@v1.0.0?package-id=e832b793857df1ce", "pkg:golang/connectrpc.com/connect@v1.20.0?package-id=4b819937d2b25c37", "pkg:golang/cuelabs.dev/go/oci/ociregistry@v0.0.0-20251212221603-3adeb8663819?package-id=58fc3d33e7bf6653", "pkg:golang/cuelang.org/go@v0.16.1?package-id=0508c18c4ef759af", "pkg:golang/github.com/agnivade/levenshtein@v1.2.1?package-id=ac95dc57dddfc9c1", "pkg:golang/github.com/alibabacloud-go/alibabacloud-gateway-spi@v0.0.4?package-id=e0865b67ab73492c", "pkg:golang/github.com/alibabacloud-go/cr-20160607@v1.0.1?package-id=0b8816b0db818409", "pkg:golang/github.com/alibabacloud-go/cr-20181201@v1.0.10?package-id=76ce7a8169886d39", "pkg:golang/github.com/alibabacloud-go/darabonba-openapi@v0.2.1?package-id=c39e5a9ac94ba060", "pkg:golang/github.com/alibabacloud-go/debug@v1.0.0?package-id=d44080a594c1f7b5", "pkg:golang/github.com/alibabacloud-go/endpoint-util@v1.1.1?package-id=9ec653ae23e6d82b", "pkg:golang/github.com/alibabacloud-go/openapi-util@v0.1.0?package-id=f4f0a50cc0c42c15", "pkg:golang/github.com/alibabacloud-go/tea-utils@v1.4.5?package-id=b841ffac07a96e9f", "pkg:golang/github.com/alibabacloud-go/tea-xml@v1.1.3?package-id=ff06bcc2fa22c8eb", "pkg:golang/github.com/alibabacloud-go/tea@v1.2.1?package-id=fa22593849a7ccd4", "pkg:golang/github.com/aliyun/credentials-go@v1.3.2?package-id=b4e83ee066eabb60", "pkg:golang/github.com/aliyuncontainerservice/ack-ram-tool/pkg/credentials/provider@v0.14.0?package-id=a090d7050612d7d3", "pkg:golang/github.com/asaskevich/govalidator@v0.0.0-20230301143203-a9d515a09cc2?package-id=a86a9cb62c199a48", "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.25?package-id=2ba6b2eb66201746", "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.24?package-id=dd7bb8328e092185", "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.29?package-id=c7907eb5c3b4fde8", "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.29?package-id=b830a34a0b36da7e", "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.29?package-id=7a7962a2f227199a", "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.30?package-id=c98a0684b501009d", "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecr@v1.55.3?package-id=6881a4b844dcd393", "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ecrpublic@v1.38.10?package-id=609d2867e33fb3c7", "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.12?package-id=d41d72bf86bf58fb", "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.29?package-id=c17e921291785cf2", "pkg:golang/github.com/aws/aws-sdk-go-v2/service/kms@v1.53.4?package-id=be7e0ec912d96295", "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.2.0?package-id=11bac7c1bc914ca7", "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.31.3?package-id=d564c598e7bcca9c", "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.36.6?package-id=995ebab973b1f52a", "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.43.3?package-id=c317f31fd67d5a3d", "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.42.0?package-id=f433d390485b285f", "pkg:golang/github.com/aws/smithy-go@v1.27.2?package-id=29fbe9cdc9e9d67b", "pkg:golang/github.com/awslabs/amazon-ecr-credential-helper/ecr-login@v0.12.0?package-id=5c114de4bdf93c23", "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.22.0?package-id=956138b0fd188c99", "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azidentity@v1.14.0?package-id=9e10b1e0b2fcd425", "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.12.0?package-id=52e7405110852c49", "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/security/keyvault/azkeys@v1.5.0?package-id=27c0d1e29f068fbe", "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/security/keyvault/internal@v1.2.0?package-id=3dccdceb0bdb3fff", "pkg:golang/github.com/azure/azure-sdk-for-go@v68.0.0%2Bincompatible?package-id=3ebca22363ceb73f", "pkg:golang/github.com/azure/go-autorest/autorest/adal@v0.9.23?package-id=de65619c4da8092f", "pkg:golang/github.com/azure/go-autorest/autorest/azure/auth@v0.5.12?package-id=7d51b47de7acff4b", "pkg:golang/github.com/azure/go-autorest/autorest/azure/cli@v0.4.6?package-id=4294e98a585f85c3", "pkg:golang/github.com/azure/go-autorest/autorest/date@v0.3.0?package-id=0caab52d5270ace1", "pkg:golang/github.com/azure/go-autorest/autorest@v0.11.29?package-id=d00814ba03c88556", "pkg:golang/github.com/azure/go-autorest/logger@v0.2.1?package-id=bb0e1f794f548df7", "pkg:golang/github.com/azure/go-autorest/tracing@v0.6.0?package-id=43eec779f796250e", "pkg:golang/github.com/azuread/microsoft-authentication-library-for-go@v1.7.2?package-id=bf3c98b242e0c1d9", "pkg:golang/github.com/blang/semver@v3.5.1%2Bincompatible?package-id=ffeca20200a341fa", "pkg:golang/github.com/buildkite/agent/v3@v3.130.0?package-id=abfab838e0ff9a0b", "pkg:golang/github.com/buildkite/go-pipeline@v0.17.1?package-id=6444de831854275a", "pkg:golang/github.com/buildkite/interpolate@v0.1.5?package-id=322cec5bd7d42da6", "pkg:golang/github.com/buildkite/roko@v1.4.0?package-id=d95882a7b8b74985", "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0?package-id=1c25c6308830e2eb", "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3?package-id=2a72e6c924703a7b", "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0?package-id=c74f0b5c421b113c", "pkg:golang/github.com/chrismellard/docker-credential-acr-env@v0.0.0-20230304212654-82a0ddb27589?package-id=822f2649cb290ba4", "pkg:golang/github.com/clbanning/mxj/v2@v2.7.0?package-id=f634c64c4d55cadc", "pkg:golang/github.com/cockroachdb/apd/v3@v3.2.1?package-id=05186a36ba63f52d", "pkg:golang/github.com/common-nighthawk/go-figure@v0.0.0-20210622060536-734e95fb86be?package-id=4b2e3a325b57bbaf", "pkg:golang/github.com/coreos/go-oidc/v3@v3.18.0?package-id=ca088e7aae563ad2", "pkg:golang/github.com/cyberphone/json-canonicalization@v0.0.0-20241213102144-19d51d7fe467?package-id=5c507dcb20521c38", "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc?package-id=8563ccd292fa72d6", "pkg:golang/github.com/digitorus/pkcs7@v0.0.0-20230818184609-3a137a874352?package-id=d9246646679f712b", "pkg:golang/github.com/digitorus/timestamp@v0.0.0-20231217203849-220c5c2851b7?package-id=9b0bbfc65ae4cb68", "pkg:golang/github.com/dimchansky/utfbom@v1.1.1?package-id=6be49ba6b7fe8f0b", "pkg:golang/github.com/docker/cli@v29.5.3%2Bincompatible?package-id=4c271c0eaaadebbd", "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5?package-id=1b4fe80612dc0f8a", "pkg:golang/github.com/dustin/go-humanize@v1.0.1?package-id=3f5e3dde3f1ea6c0", "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0?package-id=4e49692537d3125a", "pkg:golang/github.com/emicklei/proto@v1.14.3?package-id=0b91f0ca5a048197", "pkg:golang/github.com/felixge/httpsnoop@v1.0.4?package-id=73640de86c7c0f7f", "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1?package-id=88540cc4353f1003", "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0?package-id=288a5daecbe8c4c0", "pkg:golang/github.com/go-chi/chi/v5@v5.3.0?package-id=30d805043625a4c8", "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4?package-id=041434a4442e406c", "pkg:golang/github.com/go-logr/logr@v1.4.3?package-id=e8441e9847a942e0", "pkg:golang/github.com/go-logr/stdr@v1.2.2?package-id=cd8a848acac7f2b9", "pkg:golang/github.com/go-openapi/analysis@v0.25.2?package-id=e5a19a41207c0219", "pkg:golang/github.com/go-openapi/errors@v0.22.8?package-id=6344058807360661", "pkg:golang/github.com/go-openapi/jsonpointer@v0.23.1?package-id=8c6b581cdb9a3056", "pkg:golang/github.com/go-openapi/jsonreference@v0.21.6?package-id=7d98f098e0ad0985", "pkg:golang/github.com/go-openapi/loads@v0.24.0?package-id=3a01a1b081afb9e1", "pkg:golang/github.com/go-openapi/runtime/server-middleware@v0.30.0?package-id=941d9e69bd80671c", "pkg:golang/github.com/go-openapi/runtime@v0.32.4?package-id=8f0baadef50971df", "pkg:golang/github.com/go-openapi/spec@v0.22.6?package-id=1f4ce81c3240cd13", "pkg:golang/github.com/go-openapi/strfmt@v0.26.4?package-id=7592de14cecb007b", "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.26.1?package-id=5249c20a1f0f6125", "pkg:golang/github.com/go-openapi/swag/conv@v0.27.0?package-id=64e01b917ded6946", "pkg:golang/github.com/go-openapi/swag/fileutils@v0.26.1?package-id=cddb89b7bcc96133", "pkg:golang/github.com/go-openapi/swag/jsonname@v0.26.1?package-id=0a32b173b9ba4d57", "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.26.1?package-id=58cc527bc944e0f1", "pkg:golang/github.com/go-openapi/swag/loading@v0.26.1?package-id=d55448928bd57942", "pkg:golang/github.com/go-openapi/swag/mangling@v0.26.1?package-id=78751fffa88bc056", "pkg:golang/github.com/go-openapi/swag/netutils@v0.26.1?package-id=f96def0cbd9ce51c", "pkg:golang/github.com/go-openapi/swag/stringutils@v0.26.1?package-id=45c5be6233ceef57", "pkg:golang/github.com/go-openapi/swag/typeutils@v0.27.0?package-id=4a4fbff35cbdce19", "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.26.1?package-id=4eda830f8f38faa8", "pkg:golang/github.com/go-openapi/swag@v0.26.1?package-id=76031e608120788a", "pkg:golang/github.com/go-openapi/validate@v0.26.0?package-id=50deeed2d23d0b74", "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0?package-id=cbed1cdd07c7498c", "pkg:golang/github.com/gobwas/glob@v0.2.3?package-id=380556d81593652b", "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.2?package-id=64264fa7188f584d", "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1?package-id=76e05903adc826ce", "pkg:golang/github.com/golang/snappy@v0.0.4?package-id=3548e28213aa3c53", "pkg:golang/github.com/google/certificate-transparency-go@v1.3.3?package-id=b6457f0457f56c88", "pkg:golang/github.com/google/gnostic-models@v0.7.0?package-id=36fb2b67834a4f48", "pkg:golang/github.com/google/go-cmp@v0.7.0?package-id=98e170c8fa1e72c6", "pkg:golang/github.com/google/go-containerregistry@v0.21.7?package-id=a83cb58ec12357cb", "pkg:golang/github.com/google/go-github/v88@v88.0.0?package-id=a7ffd80cd6a1b9c5", "pkg:golang/github.com/google/go-querystring@v1.2.0?package-id=3cdb4891177cee41", "pkg:golang/github.com/google/s2a-go@v0.1.9?package-id=01eef039a65f500b", "pkg:golang/github.com/google/uuid@v1.6.0?package-id=e86facf3de3280a5", "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.16?package-id=1ea2c686ef5acc68", "pkg:golang/github.com/googleapis/gax-go/v2@v2.22.0?package-id=44672b3260f87586", "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0?package-id=fa7ba9db8882500e", "pkg:golang/github.com/hashicorp/errwrap@v1.1.0?package-id=48c0c5ef6cbbbd97", "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2?package-id=77c9a103d9a3e924", "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1?package-id=28453a565d0c3f48", "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8?package-id=91c94614ac7a150c", "pkg:golang/github.com/hashicorp/go-rootcerts@v1.0.2?package-id=ae1559a58a8e6b2c", "pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.2.0?package-id=998e03f76c077270", "pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2?package-id=4550af8a844634d7", "pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.7?package-id=db730f5b04896a3b", "pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-7?package-id=2621f1fa39270fc2", "pkg:golang/github.com/hashicorp/vault/api@v1.22.0?package-id=97ce4d0148eaed12", "pkg:golang/github.com/in-toto/attestation@v1.2.0?package-id=bc071895f1d5bc53", "pkg:golang/github.com/in-toto/in-toto-golang@v0.11.0?package-id=6f517d0abd340aab", "pkg:golang/github.com/jedisct1/go-minisign@v0.0.0-20230811132847-661be99b8267?package-id=96f45417e1619aaa", "pkg:golang/github.com/jellydator/ttlcache/v3@v3.4.0?package-id=d1d055a538801387", "pkg:golang/github.com/json-iterator/go@v1.1.12?package-id=313e4eeb8068a695", "pkg:golang/github.com/klauspost/compress@v1.18.6?package-id=d7192dc1775fec0d", "pkg:golang/github.com/kylelemons/godebug@v1.1.0?package-id=9a1890ae72250762", "pkg:golang/github.com/lestrrat-go/blackmagic@v1.0.4?package-id=f9e835bbb6c5625b", "pkg:golang/github.com/lestrrat-go/dsig@v1.2.1?package-id=de5cad7fa2f5b552", "pkg:golang/github.com/lestrrat-go/httpcc@v1.0.1?package-id=cfcd598c6323c264", "pkg:golang/github.com/lestrrat-go/httprc/v3@v3.0.5?package-id=631dbdadd1221c99", "pkg:golang/github.com/lestrrat-go/jwx/v3@v3.1.1?package-id=7c0ee11570070a17", "pkg:golang/github.com/lestrrat-go/option/v2@v2.0.0?package-id=0fe078ddd4ad7dd0", "pkg:golang/github.com/letsencrypt/boulder@v0.20260309.0?package-id=edccb36e878b49cf", "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0?package-id=5a3aa8786f74bed2", "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1?package-id=914d6104a226a38c", "pkg:golang/github.com/mitchellh/mapstructure@v1.5.1-0.20231216201459-8508981c8b6c?package-id=635bc398202f6638", "pkg:golang/github.com/moby/term@v0.5.2?package-id=d5529efbaf47914b", "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd?package-id=b0492a858b88ae9b", "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee?package-id=d29222f3d5e683b7", "pkg:golang/github.com/mozillazg/docker-credential-acr-helper@v0.4.0?package-id=b1fccacfdfdb2267", "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822?package-id=379a7f20e5553086", "pkg:golang/github.com/natefinch/atomic@v1.0.1?package-id=03f8acae9e6a8df8", "pkg:golang/github.com/nozzle/throttler@v0.0.0-20180817012639-2ea982251481?package-id=efd5e0d6d0b5bb84", "pkg:golang/github.com/oklog/ulid/v2@v2.1.1?package-id=6ea918ed867c96d7", "pkg:golang/github.com/oleiade/reflections@v1.1.0?package-id=de174e1df334c221", "pkg:golang/github.com/open-policy-agent/opa@v1.17.1?package-id=61d913d00e246694", "pkg:golang/github.com/opencontainers/go-digest@v1.0.0?package-id=bb953254e61ce30b", "pkg:golang/github.com/opencontainers/image-spec@v1.1.1?package-id=ed2e70761b2640d6", "pkg:golang/github.com/pborman/uuid@v1.2.1?package-id=4399776f0dc1dfc5", "pkg:golang/github.com/pelletier/go-toml/v2@v2.2.4?package-id=83861b6444287688", "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c?package-id=f1c4650d35db5ca8", "pkg:golang/github.com/pkg/errors@v0.9.1?package-id=8b01468316505e72", "pkg:golang/github.com/protocolbuffers/txtpbfmt@v0.0.0-20260217160748-a481f6a22f94?package-id=705f5eccc5df187d", "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20250401214520-65e299d6c5c9?package-id=ee1493ee0efcaacc", "pkg:golang/github.com/rogpeppe/go-internal@v1.14.1?package-id=4fa27e07e5de404a", "pkg:golang/github.com/ryanuber/go-glob@v1.0.0?package-id=f59ded7721a60035", "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0?package-id=655dfba39bcc58d7", "pkg:golang/github.com/sassoftware/relic@v7.2.1%2Bincompatible?package-id=20f3382034947866", "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.0?package-id=c16bd5409a3e0fe3", "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0?package-id=7c719d48b0d88e84", "pkg:golang/github.com/sigstore/protobuf-specs@v0.5.1?package-id=9910ec30221d6b3c", "pkg:golang/github.com/sigstore/rekor-tiles/v2@v2.3.0?package-id=17602fc3018d25c3", "pkg:golang/github.com/sigstore/rekor@v1.5.3?package-id=4d51b0cb4274cbc5", "pkg:golang/github.com/sigstore/sigstore-go@v1.2.2?package-id=b589a5fc4b15278b", "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/aws@v1.10.8?package-id=f0e2d5fbd40d0cb1", "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/azure@v1.10.8?package-id=5693d211b3108f70", "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/gcp@v1.10.8?package-id=770c394a5895a16f", "pkg:golang/github.com/sigstore/sigstore/pkg/signature/kms/hashivault@v1.10.8?package-id=e77bd4b7daa99bbd", "pkg:golang/github.com/sigstore/sigstore@v1.10.8?package-id=bc115db5a2a8c525", "pkg:golang/github.com/sigstore/timestamp-authority/v2@v2.1.2?package-id=be2c8e7e491363aa", "pkg:golang/github.com/sirupsen/logrus@v1.9.4?package-id=8c959fd0895376c8", "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8?package-id=d1c0abbb23fdbe37", "pkg:golang/github.com/spf13/afero@v1.15.0?package-id=5070b17421b7d4d7", "pkg:golang/github.com/spf13/cast@v1.10.0?package-id=d5f51cfeeef44136", "pkg:golang/github.com/spf13/cobra@v1.10.2?package-id=071c034e8d34e039", "pkg:golang/github.com/spf13/pflag@v1.0.10?package-id=0efef7414e92f8a7", "pkg:golang/github.com/spf13/viper@v1.21.0?package-id=7ac8ca732537d303", "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.7.0?package-id=ead0acbbb27ad216", "pkg:golang/github.com/subosito/gotenv@v1.6.0?package-id=f1407e529ec8cf43", "pkg:golang/github.com/syndtr/goleveldb@v1.0.1-0.20220721030215-126854af5e6d?package-id=8e0e937c344d5244", "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.3?package-id=57d69defd88ae203", "pkg:golang/github.com/theupdateframework/go-tuf/v2@v2.4.2?package-id=734096f2ccd1bbf7", "pkg:golang/github.com/theupdateframework/go-tuf@v0.7.0?package-id=500479ed66466bb1", "pkg:golang/github.com/titanous/rocacheck@v0.0.0-20171023193734-afe73141d399?package-id=31114f300e4fa288", "pkg:golang/github.com/tjfoc/gmsm@v1.4.1?package-id=9736551677964d71", "pkg:golang/github.com/transparency-dev/formats@v0.1.1?package-id=e57e257309f1b734", "pkg:golang/github.com/transparency-dev/merkle@v0.0.2?package-id=d8636abbe60be7db", "pkg:golang/github.com/valyala/fastjson@v1.6.10?package-id=3a7e004c1361d140", "pkg:golang/github.com/vektah/gqlparser/v2@v2.5.33?package-id=4d6423eff828ca7e", "pkg:golang/github.com/withfig/autocomplete-tools/integrations/cobra@v1.2.1?package-id=c4f3d53469fb41e6", "pkg:golang/github.com/x448/float16@v0.8.4?package-id=0cb6b572a6fad448", "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb?package-id=69c561b61bfffc86", "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415?package-id=a108dd8e7a5dd789", "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0?package-id=9fa5883eb147b6d6", "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78?package-id=96212e2c50a7f772", "pkg:golang/gitlab.com/gitlab-org/api/client-go@v1.46.0?package-id=77d6a70ac9a95f9e", "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1?package-id=3cb8b0d0cf4688a8", "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.68.0?package-id=e36929cfae3fb528", "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.68.0?package-id=1f9cb2364f03d6b9", "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0?package-id=b6ba47d54ed8499d", "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0?package-id=c3a8adb30e12a98e", "pkg:golang/go.opentelemetry.io/otel@v1.44.0?package-id=c95beaae1082257c", "pkg:golang/go.uber.org/multierr@v1.11.0?package-id=366da7cd0db28324", "pkg:golang/go.uber.org/zap@v1.28.0?package-id=e4de23795492f806", "pkg:golang/go.yaml.in/yaml/v2@v2.4.4?package-id=4b8c431b47e44a45", "pkg:golang/go.yaml.in/yaml/v3@v3.0.4?package-id=f547101fbf01b089", "pkg:golang/golang.org/x/crypto@v0.53.0?package-id=fc040067debf8ebc", "pkg:golang/golang.org/x/mod@v0.37.0?package-id=17c66526bef668a6", "pkg:golang/golang.org/x/net@v0.56.0?package-id=46101e2b7cb51032", "pkg:golang/golang.org/x/oauth2@v0.36.0?package-id=fe9d78c21b2b3609", "pkg:golang/golang.org/x/sync@v0.21.0?package-id=c0d4007f48859478", "pkg:golang/golang.org/x/sys@v0.46.0?package-id=f8c8a7541eb8e5bf", "pkg:golang/golang.org/x/term@v0.44.0?package-id=4f7e674e52d6be98", "pkg:golang/golang.org/x/text@v0.38.0?package-id=d175a2dfc40dadab", "pkg:golang/golang.org/x/time@v0.15.0?package-id=861ab93bcdf7c9d0", "pkg:golang/google.golang.org/api@v0.284.0?package-id=f6f379c88a9b7f7f", "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260526163538-3dc84a4a5aaa?package-id=45dd1121d35da4a4", "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260526163538-3dc84a4a5aaa?package-id=fb2b07def0c8c6a5", "pkg:golang/google.golang.org/genproto@v0.0.0-20260406210006-6f92a3bedf2d?package-id=b89b348e583177e8", "pkg:golang/google.golang.org/grpc@v1.82.0?package-id=665ca92380c6bc29", "pkg:golang/google.golang.org/protobuf@v1.36.12-0.20260120151049-f2248ac996af?package-id=0a752e43d33fd0ed", "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0?package-id=e825b3f6e4a4021a", "pkg:golang/gopkg.in/inf.v0@v0.9.1?package-id=8e7075a976a817ba", "pkg:golang/gopkg.in/ini.v1@v1.67.3?package-id=683f6f022d069c50", "pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=be145a35051c02fc", "pkg:golang/k8s.io/api@v0.36.2?package-id=274e650c02109f95", "pkg:golang/k8s.io/apimachinery@v0.36.2?package-id=a7f9ff4bedccb3e7", "pkg:golang/k8s.io/client-go@v0.36.2?package-id=a7c5dceeeef3eb89", "pkg:golang/k8s.io/klog/v2@v2.140.0?package-id=47717988fec74b0e", "pkg:golang/k8s.io/kube-openapi@v0.0.0-20260317180543-43fb72c5454a?package-id=20fbeb0f868f8372", "pkg:golang/k8s.io/utils@v0.0.0-20260210185600-b8788abfbbc2?package-id=e4dd313bffcc02df", "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730?package-id=082493fc30e5cd24", "pkg:golang/sigs.k8s.io/randfill@v1.0.0?package-id=70bdd0f8de3862e1", "pkg:golang/sigs.k8s.io/release-utils@v0.12.4?package-id=c453be9674465e0d", "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.2?package-id=8f37f6ab0d5fb811", "pkg:golang/sigs.k8s.io/yaml@v1.6.0?package-id=70cb5e699caec9d6", "pkg:golang/stdlib@1.27.0?package-id=20e22cd40a04f35e" ] } ] }