diff --git a/internal/schemavalidators/schemavalidators.go b/internal/schemavalidators/schemavalidators.go index 64b56bf4f..ac7a7b45b 100644 --- a/internal/schemavalidators/schemavalidators.go +++ b/internal/schemavalidators/schemavalidators.go @@ -18,6 +18,7 @@ package schemavalidators import ( _ "embed" "errors" + "slices" "strings" "github.com/hashicorp/go-multierror" @@ -121,6 +122,18 @@ func ValidateCycloneDX(data interface{}, version CycloneDXVersion) error { if errors.As(err, &invalidJSONTypeError) { return ErrInvalidJSONPayload } + var validationError *jsonschema.ValidationError + if errors.As(err, &validationError) { + if slices.ContainsFunc(validationError.Causes, func(v0 *jsonschema.ValidationError) bool { + return slices.ContainsFunc(v0.Causes, func(v1 *jsonschema.ValidationError) bool { + // workaround: Some scanners like Jfrog Xray might report null `cwes` element ("cwes": null) + // the validator would fail with "expected array, but got null" + return v1.KeywordLocation == "/properties/vulnerabilities/items/$ref/properties/cwes/type" + }) + }) { + return nil + } + } return err } diff --git a/pkg/attestation/crafter/materials/cyclonedxjson.go b/pkg/attestation/crafter/materials/cyclonedxjson.go index 45366fda2..28d928565 100644 --- a/pkg/attestation/crafter/materials/cyclonedxjson.go +++ b/pkg/attestation/crafter/materials/cyclonedxjson.go @@ -34,7 +34,8 @@ const ( // containerComponentKind is the kind of the main component when it's a container containerComponentKind = "container" // aquaTrivyRepoDigestPropertyKey is the key used by Aqua Trivy to store the repo digest - aquaTrivyRepoDigestPropertyKey = "aquasecurity:trivy:RepoDigest" + aquaTrivyRepoDigestPropertyKey = "aquasecurity:trivy:RepoDigest" + annotationSBOMHasVulnerabilities = "chainloop.material.sbom.vulnerabilities_report" ) type CyclonedxJSONCrafter struct { @@ -44,8 +45,9 @@ type CyclonedxJSONCrafter struct { // cyclonedxDoc internal struct to unmarshall the incoming CycloneDX JSON type cyclonedxDoc struct { - SpecVersion string `json:"specVersion"` - Metadata json.RawMessage `json:"metadata"` + SpecVersion string `json:"specVersion"` + Metadata json.RawMessage `json:"metadata"` + Vulnerabilities json.RawMessage `json:"vulnerabilities"` } type cyclonedxMetadataV14 struct { @@ -124,28 +126,39 @@ func (i *CyclonedxJSONCrafter) Craft(ctx context.Context, filePath string) (*api i.logger.Debug().Err(err).Msg("error decoding file to extract main information, skipping ...") } - switch doc.SpecVersion { - case "1.4": + // Try with metadata tools format > v1.5 + var metaV15 cyclonedxMetadataV15 + if err = json.Unmarshal(doc.Metadata, &metaV15); err != nil { + // try with v1.4 var metaV14 cyclonedxMetadataV14 if err = json.Unmarshal(doc.Metadata, &metaV14); err != nil { i.logger.Debug().Err(err).Msg("error decoding file to extract main information, skipping ...") } else { i.extractMetadata(m, &metaV14) } - default: // 1.5 onwards - var metaV15 cyclonedxMetadataV15 - if err = json.Unmarshal(doc.Metadata, &metaV15); err != nil { - i.logger.Debug().Err(err).Msg("error decoding file to extract main information, skipping ...") - } else { - i.extractMetadata(m, &metaV15) - } + } else { + i.extractMetadata(m, &metaV15) } + i.injectAnnotations(m, &doc) + return res, nil } +func (i *CyclonedxJSONCrafter) injectAnnotations(m *api.Attestation_Material, doc *cyclonedxDoc) { + // store whether the SBOM has a vulnerabilities report + if doc.Vulnerabilities != nil { + if m.Annotations == nil { + m.Annotations = make(map[string]string) + } + m.Annotations[annotationSBOMHasVulnerabilities] = "true" + } +} + func (i *CyclonedxJSONCrafter) extractMetadata(m *api.Attestation_Material, metadata any) { - m.Annotations = make(map[string]string) + if m.Annotations == nil { + m.Annotations = make(map[string]string) + } switch meta := metadata.(type) { case *cyclonedxMetadataV14: diff --git a/pkg/attestation/crafter/materials/cyclonedxjson_test.go b/pkg/attestation/crafter/materials/cyclonedxjson_test.go index 95d3d949d..1cd0ef6b5 100644 --- a/pkg/attestation/crafter/materials/cyclonedxjson_test.go +++ b/pkg/attestation/crafter/materials/cyclonedxjson_test.go @@ -115,6 +115,47 @@ func TestCyclonedxJSONCraft(t *testing.T) { "chainloop.material.tool.version": "0.101.1", }, }, + { + name: "1.5 version with legacy tools", + filePath: "./testdata/sbom.cyclonedx-1.5-legacy-tools.json", + wantDigest: "sha256:7bcc88d02bc19447f3fbe6bb76f12bf0f3788b3796b401716c1d62735f9c8c88", + wantFilename: "sbom.cyclonedx-1.5-legacy-tools.json", + wantMainComponent: "ghcr.io/chainloop-dev/chainloop/control-plane", + wantMainComponentKind: "container", + wantMainComponentVersion: "v0.55.0", + annotations: map[string]string{ + "chainloop.material.tool.name": "syft", + "chainloop.material.tool.version": "0.73.0", + }, + }, + { + name: "1.5 version with vulnerabilities", + filePath: "./testdata/sbom.cyclonedx-1.5-vulnerabilities.json", + wantDigest: "sha256:16248b84917cee938826bd4de98b84b243715891524bf5e6ebfc33f2c499e60b", + wantFilename: "sbom.cyclonedx-1.5-vulnerabilities.json", + wantMainComponent: "ghcr.io/chainloop-dev/chainloop/control-plane", + wantMainComponentKind: "container", + wantMainComponentVersion: "v0.55.0", + annotations: map[string]string{ + "chainloop.material.tool.name": "syft", + "chainloop.material.tool.version": "0.101.1", + "chainloop.material.sbom.vulnerabilities_report": "true", + }, + }, + { + name: "1.5 version with vulnerability with null cwes", + filePath: "./testdata/sbom.cyclonedx-1.5-null-cwes.json", + wantDigest: "sha256:0b3aef5f26a3c28da82cbc510cee7633cd5b2cb264d3fa25eebbc10795546ffb", + wantFilename: "sbom.cyclonedx-1.5-null-cwes.json", + wantMainComponent: "ghcr.io/chainloop-dev/chainloop/control-plane", + wantMainComponentKind: "container", + wantMainComponentVersion: "v0.55.0", + annotations: map[string]string{ + "chainloop.material.tool.name": "syft", + "chainloop.material.tool.version": "0.101.1", + "chainloop.material.sbom.vulnerabilities_report": "true", + }, + }, } schema := &contractAPI.CraftingSchema_Material{ diff --git a/pkg/attestation/crafter/materials/testdata/sbom.cyclonedx-1.5-legacy-tools.json b/pkg/attestation/crafter/materials/testdata/sbom.cyclonedx-1.5-legacy-tools.json new file mode 100644 index 000000000..fd0dc479c --- /dev/null +++ b/pkg/attestation/crafter/materials/testdata/sbom.cyclonedx-1.5-legacy-tools.json @@ -0,0 +1,9858 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.5", + "serialNumber": "urn:uuid:fb656b68-ebe4-42a9-bd76-ac382b0e6752", + "version": 1, + "metadata": { + "timestamp": "2024-01-27T22:30:07+01:00", + "tools": [ + { + "vendor": "anchore", + "name": "syft", + "version": "0.73.0" + } + ], + "component": { + "bom-ref": "d5a681ad9af7217d", + "type": "container", + "name": "ghcr.io/chainloop-dev/chainloop/control-plane", + "version": "v0.55.0" + } + }, + "components": [ + { + "bom-ref": "pkg:golang/ariga.io/atlas@v0.13.3?package-id=b414da9862878694", + "type": "library", + "name": "ariga.io/atlas", + "version": "v0.13.3", + "purl": "pkg:golang/ariga.io/atlas@v0.13.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:L6Zz/0/yo86flQclZwIqJEKrHoJxQOkj3Z2JPvzZEHE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/cloud.google.com/go@v0.110.9?package-id=f1b15d44b80e8c02", + "type": "library", + "name": "cloud.google.com/go", + "version": "v0.110.9", + "purl": "pkg:golang/cloud.google.com/go@v0.110.9", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:e7ITSqGFFk4rbz/JFIqZh3G4VEHguhAL4BQcFlWtU68=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/cloud.google.com/go/compute/metadata@v0.2.3?package-id=f59e99a33aefe15e", + "type": "library", + "name": "cloud.google.com/go/compute/metadata", + "version": "v0.2.3", + "cpe": "cpe:2.3:a:go:compute\\/metadata:v0.2.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/cloud.google.com/go/compute/metadata@v0.2.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:mg4jlk7mCAj6xXp9UJ4fjI9VUI5rubuGBW5aJ7UnBMY=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/cloud.google.com/go/iam@v1.1.4?package-id=e60f021b78ad279b", + "type": "library", + "name": "cloud.google.com/go/iam", + "version": "v1.1.4", + "cpe": "cpe:2.3:a:go:iam:v1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/cloud.google.com/go/iam@v1.1.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:K6n/GZHFTtEoKT5aUG3l9diPi0VduZNQ1PfdnpkkIFk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/cloud.google.com/go/secretmanager@v1.11.2?package-id=581613de2374e3ed", + "type": "library", + "name": "cloud.google.com/go/secretmanager", + "version": "v1.11.2", + "cpe": "cpe:2.3:a:go:secretmanager:v1.11.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/cloud.google.com/go/secretmanager@v1.11.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:52Z78hH8NBWIqbvIG0wi0EoTaAmSx99KIOAmDXIlX0M=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/cloud.google.com/go/storage@v1.33.0?package-id=802630e9fab2edb3", + "type": "library", + "name": "cloud.google.com/go/storage", + "version": "v1.33.0", + "cpe": "cpe:2.3:a:go:storage:v1.33.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/cloud.google.com/go/storage@v1.33.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:PVrDOkIC8qQVa1P3SXGpQvfuJhN2LHOoyZvWs8D2X5M=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/code.cloudfoundry.org/bytefmt@v0.0.0-20230612151507-41ef4d1f67a4?package-id=b648a64660a16dbf", + "type": "library", + "name": "code.cloudfoundry.org/bytefmt", + "version": "v0.0.0-20230612151507-41ef4d1f67a4", + "purl": "pkg:golang/code.cloudfoundry.org/bytefmt@v0.0.0-20230612151507-41ef4d1f67a4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:9G5F8zgma5v0GdDvNz6iZwwJp3RS/z0SY/aHGfVwvTo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/entgo.io/ent@v0.12.3?package-id=731ef001f91324c5", + "type": "library", + "name": "entgo.io/ent", + "version": "v0.12.3", + "purl": "pkg:golang/entgo.io/ent@v0.12.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:N5lO2EOrHpCH5HYfiMOCHYbo+oh5M8GjT0/cx5x6xkk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.8.0?package-id=beb3d4bf5c25dbb6", + "type": "library", + "name": "github.com/Azure/azure-sdk-for-go/sdk/azcore", + "version": "v1.8.0", + "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/azcore:v1.8.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azcore@v1.8.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/azcore:v1.8.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:9kDVnTz3vbfweTqAUmk/a/pH5pWFCHtvRpHYC0G/dcA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azidentity@v1.4.0?package-id=09127dcba1cb1e06", + "type": "library", + "name": "github.com/Azure/azure-sdk-for-go/sdk/azidentity", + "version": "v1.4.0", + "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/azidentity:v1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/azidentity:v1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:BMAjVKJM0U/CYF27gA0ZMmXGkOcvfFtD0oHVZ1TIPRI=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.4.0?package-id=65920e48a72c24c0", + "type": "library", + "name": "github.com/Azure/azure-sdk-for-go/sdk/internal", + "version": "v1.4.0", + "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/internal:v1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/internal@v1.4.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/internal:v1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:TuEMD+E+1aTjjLICGQOW6vLe8UWES7kopac9mUXL56Y=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/keyvault/azsecrets@v0.12.0?package-id=18d7aa4be0e2bf4f", + "type": "library", + "name": "github.com/Azure/azure-sdk-for-go/sdk/keyvault/azsecrets", + "version": "v0.12.0", + "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/keyvault\\/azsecrets:v0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/keyvault/azsecrets@v0.12.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/keyvault\\/azsecrets:v0.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:xnO4sFyG8UH2fElBkcqLTOZsAajvKfnSlgBBW8dXYjw=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/keyvault/internal@v0.7.1?package-id=462d93d2a7eab7a3", + "type": "library", + "name": "github.com/Azure/azure-sdk-for-go/sdk/keyvault/internal", + "version": "v0.7.1", + "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/keyvault\\/internal:v0.7.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/keyvault/internal@v0.7.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/keyvault\\/internal:v0.7.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:FbH3BbSb4bvGluTesZZ+ttN/MDsnMmQP36OSnDuSXqw=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/storage/azblob@v1.1.0?package-id=9af35c560b176ff1", + "type": "library", + "name": "github.com/Azure/azure-sdk-for-go/sdk/storage/azblob", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/storage\\/azblob:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob@v1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/storage\\/azblob:v1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:nVocQV40OQne5613EeLayJiRAJuKlBGy+m22qWG+WRg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/azuread/microsoft-authentication-library-for-go@v1.2.0?package-id=b09096b981626896", + "type": "library", + "name": "github.com/AzureAD/microsoft-authentication-library-for-go", + "version": "v1.2.0", + "cpe": "cpe:2.3:a:AzureAD:microsoft-authentication-library-for-go:v1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/AzureAD/microsoft-authentication-library-for-go@v1.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:AzureAD:microsoft_authentication_library_for_go:v1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:hVeq+yCyUi+MsoO/CU95yqCIcdzra5ovzk8Q2BBpV2M=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/agext/levenshtein@v1.2.3?package-id=351e9e8ae46f4d59", + "type": "library", + "name": "github.com/agext/levenshtein", + "version": "v1.2.3", + "cpe": "cpe:2.3:a:agext:levenshtein:v1.2.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/agext/levenshtein@v1.2.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:YB2fHEn0UJagG8T1rrWknE3ZQzWM06O8AMAatNn7lmo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/apparentlymart/go-textseg/v13@v13.0.0?package-id=f81479e62ecc939c", + "type": "library", + "name": "github.com/apparentlymart/go-textseg/v13", + "version": "v13.0.0", + "cpe": "cpe:2.3:a:apparentlymart:go-textseg\\/v13:v13.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/apparentlymart/go-textseg/v13@v13.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:apparentlymart:go_textseg\\/v13:v13.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Y+KvPE1NYz0xl601PVImeQfFyEy6iT90AvPUL1NNfNw=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go@v1.47.0?package-id=d1865182c8f4c818", + "type": "library", + "name": "github.com/aws/aws-sdk-go", + "version": "v1.47.0", + "cpe": "cpe:2.3:a:aws:aws-sdk-go:v1.47.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go@v1.47.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go:v1.47.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:/JUg9V1+xh+qBn8A6ec/l15ETPaMaBqxkjz+gg63dNk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.21.2?package-id=52cbf77ae1c766a1", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2", + "version": "v1.21.2", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2:v1.21.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.21.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2:v1.21.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:+LXZ0sgo8quN9UOKXXzAWRT3FWd4NxeXWOZom9pE7GA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.19.1?package-id=8d6adfa7465f43b0", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/config", + "version": "v1.19.1", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/config:v1.19.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.19.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/config:v1.19.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:oe3vqcGftyk40icfLymhhhNysAwk0NfiwkDi2GTPMXs=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.13.43?package-id=0d6ff47d52f4974c", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/credentials", + "version": "v1.13.43", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/credentials:v1.13.43:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.13.43", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/credentials:v1.13.43:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:LU8vo40zBlo3R7bAvBVy/ku4nxGEyZe9N8MqAeFTzF8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.13.13?package-id=6254035ab4aa5858", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds", + "version": "v1.13.13", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/feature\\/ec2\\/imds:v1.13.13:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.13.13", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/feature\\/ec2\\/imds:v1.13.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:PIktER+hwIG286DqXyvVENjgLTAwGgoeriLDD5C+YlQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.1.43?package-id=8b902afc3f9e4a2b", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/internal/configsources", + "version": "v1.1.43", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/configsources:v1.1.43:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.1.43", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/configsources:v1.1.43:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:nFBQlGtkbPzp/NjZLuFxRqmT91rLJkgvsEQs68h962Y=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.4.37?package-id=8c8da101453c77d5", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2", + "version": "v2.4.37", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/endpoints\\/v2:v2.4.37:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.4.37", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/endpoints\\/v2:v2.4.37:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:JRVhO25+r3ar2mKGP7E0LDl8K9/G36gjlqca5iQbaqc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/ini@v1.3.45?package-id=59fe0f29ee75ed85", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/internal/ini", + "version": "v1.3.45", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/ini:v1.3.45:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/ini@v1.3.45", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/ini:v1.3.45:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:hze8YsjSh8Wl1rYa1CJpRmXP21BvOBuc76YhW0HsuQ4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.9.37?package-id=1972d8eedb279e71", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url", + "version": "v1.9.37", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/presigned-url:v1.9.37:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.9.37", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/presigned_url:v1.9.37:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:WWZA/I2K4ptBS1kg0kV1JbBtG/umed0vwHRrmcr9z7k=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/secretsmanager@v1.21.3?package-id=ee882e1ce7417f1e", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/service/secretsmanager", + "version": "v1.21.3", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/secretsmanager:v1.21.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/secretsmanager@v1.21.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/secretsmanager:v1.21.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:H6ZipEknzu7RkJW3w2PP75zd8XOdR35AEY5D57YrJtA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.15.2?package-id=18c033191679d9af", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/service/sso", + "version": "v1.15.2", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sso:v1.15.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.15.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sso:v1.15.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:JuPGc7IkOP4AaqcZSIcyqLpFSqBWK32rM9+a1g6u73k=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.17.3?package-id=cc3c13a86464dc63", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc", + "version": "v1.17.3", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ssooidc:v1.17.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.17.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ssooidc:v1.17.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:HFiiRkf1SdaAmV3/BHOFZ9DjFynPHj8G/UIO1lQS+fk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.23.2?package-id=6bb2deffbee3aff2", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/service/sts", + "version": "v1.23.2", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sts:v1.23.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.23.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sts:v1.23.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:0BkLfgeDjfZnZ+MhB3ONb01u9pwFYTCZVhlsSSBvlbU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/smithy-go@v1.15.0?package-id=a1100dd62eb906f0", + "type": "library", + "name": "github.com/aws/smithy-go", + "version": "v1.15.0", + "cpe": "cpe:2.3:a:aws:smithy-go:v1.15.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/smithy-go@v1.15.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:smithy_go:v1.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:PS/durmlzvAFpQHDs4wi4sNNP9ExsqZh6IlfdHXgKK8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/beorn7/perks@v1.0.1?package-id=327be739604254dd", + "type": "library", + "name": "github.com/beorn7/perks", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/beorn7/perks@v1.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/cenkalti/backoff/v3@v3.2.2?package-id=93b712f8cc226f1f", + "type": "library", + "name": "github.com/cenkalti/backoff/v3", + "version": "v3.2.2", + "cpe": "cpe:2.3:a:cenkalti:backoff\\/v3:v3.2.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cenkalti/backoff/v3@v3.2.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:cfUAAO3yvKMYKPrvhDuHSwQnhZNk/RMHKdZqKTxfm6M=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/cenkalti/backoff/v4@v4.2.1?package-id=b165e48d3d9dfc49", + "type": "library", + "name": "github.com/cenkalti/backoff/v4", + "version": "v4.2.1", + "cpe": "cpe:2.3:a:cenkalti:backoff\\/v4:v4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cenkalti/backoff/v4@v4.2.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:y4OZtCnogmCPw98Zjyt5a6+QwPLGkiQsYW5oUqylYbM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/cespare/xxhash/v2@v2.2.0?package-id=654db79c2d438302", + "type": "library", + "name": "github.com/cespare/xxhash/v2", + "version": "v2.2.0", + "cpe": "cpe:2.3:a:cespare:xxhash\\/v2:v2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:DC2CZ1Ep5Y4k3ZQ899DldepgrayRUGE6BBZ/cd9Cj44=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/chainloop-dev/chainloop@v0.0.0-20231218210522-9bb03950e7fd?package-id=ec2f46e6ca039cc1", + "type": "library", + "name": "github.com/chainloop-dev/chainloop", + "version": "v0.0.0-20231218210522-9bb03950e7fd", + "cpe": "cpe:2.3:a:chainloop-dev:chainloop:v0.0.0-20231218210522-9bb03950e7fd:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/chainloop-dev/chainloop@v0.0.0-20231218210522-9bb03950e7fd", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:chainloop_dev:chainloop:v0.0.0-20231218210522-9bb03950e7fd:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:chainloop:chainloop:v0.0.0-20231218210522-9bb03950e7fd:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goBuildSettings:-buildmode", "value": "exe" }, + { "name": "syft:metadata:goBuildSettings:-compiler", "value": "gc" }, + { "name": "syft:metadata:goBuildSettings:-ldflags", "value": "-s -w" }, + { "name": "syft:metadata:goBuildSettings:CGO_ENABLED", "value": "0" }, + { "name": "syft:metadata:goBuildSettings:GOAMD64", "value": "v1" }, + { "name": "syft:metadata:goBuildSettings:GOARCH", "value": "amd64" }, + { "name": "syft:metadata:goBuildSettings:GOOS", "value": "linux" }, + { "name": "syft:metadata:goBuildSettings:vcs", "value": "git" }, + { + "name": "syft:metadata:goBuildSettings:vcs.modified", + "value": "false" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.revision", + "value": "9bb03950e7fd03a573c87188aee4b9a1ff62cfcf" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.time", + "value": "2023-12-18T21:05:22Z" + }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/chainloop-dev/chainloop@v0.0.0-20231218210522-9bb03950e7fd?package-id=bba8123539840bcd", + "type": "library", + "name": "github.com/chainloop-dev/chainloop", + "version": "v0.0.0-20231218210522-9bb03950e7fd", + "cpe": "cpe:2.3:a:chainloop-dev:chainloop:v0.0.0-20231218210522-9bb03950e7fd:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/chainloop-dev/chainloop@v0.0.0-20231218210522-9bb03950e7fd", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:chainloop_dev:chainloop:v0.0.0-20231218210522-9bb03950e7fd:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:chainloop:chainloop:v0.0.0-20231218210522-9bb03950e7fd:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goBuildSettings:-buildmode", "value": "exe" }, + { "name": "syft:metadata:goBuildSettings:-compiler", "value": "gc" }, + { "name": "syft:metadata:goBuildSettings:-ldflags", "value": "-s -w" }, + { "name": "syft:metadata:goBuildSettings:CGO_ENABLED", "value": "0" }, + { "name": "syft:metadata:goBuildSettings:GOAMD64", "value": "v1" }, + { "name": "syft:metadata:goBuildSettings:GOARCH", "value": "amd64" }, + { "name": "syft:metadata:goBuildSettings:GOOS", "value": "linux" }, + { "name": "syft:metadata:goBuildSettings:vcs", "value": "git" }, + { + "name": "syft:metadata:goBuildSettings:vcs.modified", + "value": "false" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.revision", + "value": "9bb03950e7fd03a573c87188aee4b9a1ff62cfcf" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.time", + "value": "2023-12-18T21:05:22Z" + }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/chainloop-dev/chainloop@v0.55.0?package-id=658c820d400c1e97", + "type": "library", + "name": "github.com/chainloop-dev/chainloop", + "version": "v0.55.0", + "cpe": "cpe:2.3:a:chainloop-dev:chainloop:v0.55.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/chainloop-dev/chainloop@v0.55.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:chainloop_dev:chainloop:v0.55.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:chainloop:chainloop:v0.55.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goBuildSettings:-buildmode", "value": "exe" }, + { "name": "syft:metadata:goBuildSettings:-compiler", "value": "gc" }, + { + "name": "syft:metadata:goBuildSettings:-ldflags", + "value": "-s -w -X github.com/chainloop-dev/chainloop/app/controlplane/internal/server.Version=0.55.0 -X main.Version=0.55.0" + }, + { "name": "syft:metadata:goBuildSettings:CGO_ENABLED", "value": "0" }, + { "name": "syft:metadata:goBuildSettings:GOAMD64", "value": "v1" }, + { "name": "syft:metadata:goBuildSettings:GOARCH", "value": "amd64" }, + { "name": "syft:metadata:goBuildSettings:GOOS", "value": "linux" }, + { "name": "syft:metadata:goBuildSettings:vcs", "value": "git" }, + { + "name": "syft:metadata:goBuildSettings:vcs.modified", + "value": "false" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.revision", + "value": "9bb03950e7fd03a573c87188aee4b9a1ff62cfcf" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.time", + "value": "2023-12-18T21:05:22Z" + }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/chainloop-dev/chainloop@v0.55.0?package-id=7db74d861b21eacb", + "type": "library", + "name": "github.com/chainloop-dev/chainloop", + "version": "v0.55.0", + "cpe": "cpe:2.3:a:chainloop-dev:chainloop:v0.55.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/chainloop-dev/chainloop@v0.55.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:chainloop_dev:chainloop:v0.55.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:chainloop:chainloop:v0.55.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goBuildSettings:-buildmode", "value": "exe" }, + { "name": "syft:metadata:goBuildSettings:-compiler", "value": "gc" }, + { + "name": "syft:metadata:goBuildSettings:-ldflags", + "value": "-s -w -X main.version=0.55.0 -X main.commit=9bb03950e7fd03a573c87188aee4b9a1ff62cfcf -X main.date=2023-12-18T21:24:33Z -X main.builtBy=goreleaser" + }, + { "name": "syft:metadata:goBuildSettings:CGO_ENABLED", "value": "0" }, + { "name": "syft:metadata:goBuildSettings:GOAMD64", "value": "v1" }, + { "name": "syft:metadata:goBuildSettings:GOARCH", "value": "amd64" }, + { "name": "syft:metadata:goBuildSettings:GOOS", "value": "linux" }, + { "name": "syft:metadata:goBuildSettings:vcs", "value": "git" }, + { + "name": "syft:metadata:goBuildSettings:vcs.modified", + "value": "false" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.revision", + "value": "9bb03950e7fd03a573c87188aee4b9a1ff62cfcf" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.time", + "value": "2023-12-18T21:05:22Z" + }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/containerd/stargz-snapshotter/estargz@v0.14.3?package-id=686a6e4236aeef74", + "type": "library", + "name": "github.com/containerd/stargz-snapshotter/estargz", + "version": "v0.14.3", + "cpe": "cpe:2.3:a:containerd:stargz-snapshotter\\/estargz:v0.14.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/containerd/stargz-snapshotter/estargz@v0.14.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:containerd:stargz_snapshotter\\/estargz:v0.14.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:OqlDCK3ZVUO6C3B/5FSkDwbkEETK84kQgEeFwDC+62k=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/coreos/go-oidc/v3@v3.7.0?package-id=5bb29796dc8f458e", + "type": "library", + "name": "github.com/coreos/go-oidc/v3", + "version": "v3.7.0", + "cpe": "cpe:2.3:a:coreos:go-oidc\\/v3:v3.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/coreos/go-oidc/v3@v3.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:coreos:go_oidc\\/v3:v3.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:FTdj0uexT4diYIPlF4yoFVI5MRO1r5+SEcIpEw9vC0o=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/desertbit/timer@v0.0.0-20180107155436-c41aec40b27f?package-id=c9a5cb36fa0626ec", + "type": "library", + "name": "github.com/desertbit/timer", + "version": "v0.0.0-20180107155436-c41aec40b27f", + "cpe": "cpe:2.3:a:desertbit:timer:v0.0.0-20180107155436-c41aec40b27f:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/desertbit/timer@v0.0.0-20180107155436-c41aec40b27f", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:U5y3Y5UE0w7amNe7Z5G/twsBW0KEalRQXZzf8ufSh9I=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/docker/cli@v24.0.7+incompatible?package-id=27567a769e8bef0e", + "type": "library", + "name": "github.com/docker/cli", + "version": "v24.0.7+incompatible", + "cpe": "cpe:2.3:a:docker:cli:v24.0.7\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/cli@v24.0.7+incompatible", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:wa/nIwYFW7BVTGa7SWPVyyXU9lgORqUb1xfI36MSkFg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/docker/distribution@v2.8.3+incompatible?package-id=f0e79f93f1b9fe1f", + "type": "library", + "name": "github.com/docker/distribution", + "version": "v2.8.3+incompatible", + "cpe": "cpe:2.3:a:docker:distribution:v2.8.3\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/distribution@v2.8.3+incompatible", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/docker/docker@v24.0.7+incompatible?package-id=45e3c997c454b1c1", + "type": "library", + "name": "github.com/docker/docker", + "version": "v24.0.7+incompatible", + "cpe": "cpe:2.3:a:docker:docker:v24.0.7\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/docker@v24.0.7+incompatible", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Wo6l37AuwP3JaMnZa226lzVXGA3F9Ig1seQen0cKYlM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/docker/docker-credential-helpers@v0.8.0?package-id=716819da3ff9bbca", + "type": "library", + "name": "github.com/docker/docker-credential-helpers", + "version": "v0.8.0", + "cpe": "cpe:2.3:a:docker:docker-credential-helpers:v0.8.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/docker-credential-helpers@v0.8.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:docker:docker_credential_helpers:v0.8.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:YQFtbBQb4VrpoPxhFuzEBPQ9E16qz5SpHLS+uswaCp8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.0.2?package-id=dff9652cb0c24c53", + "type": "library", + "name": "github.com/envoyproxy/protoc-gen-validate", + "version": "v1.0.2", + "cpe": "cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.0.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:QkIBuU5k+x7/QXPvPPnWXWlCdaBFApVqftFV6k087DA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.0.2?package-id=6d106bfcdcd909d7", + "type": "library", + "name": "github.com/envoyproxy/protoc-gen-validate", + "version": "v1.0.2", + "cpe": "cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.0.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:QkIBuU5k+x7/QXPvPPnWXWlCdaBFApVqftFV6k087DA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.0.2?package-id=4582534ffd87d01b", + "type": "library", + "name": "github.com/envoyproxy/protoc-gen-validate", + "version": "v1.0.2", + "cpe": "cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.0.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:QkIBuU5k+x7/QXPvPPnWXWlCdaBFApVqftFV6k087DA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.0.2?package-id=3f04e019b826b5b3", + "type": "library", + "name": "github.com/envoyproxy/protoc-gen-validate", + "version": "v1.0.2", + "cpe": "cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.0.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:QkIBuU5k+x7/QXPvPPnWXWlCdaBFApVqftFV6k087DA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/fatih/color@v1.15.0?package-id=b4a4fbb00937b4eb", + "type": "library", + "name": "github.com/fatih/color", + "version": "v1.15.0", + "cpe": "cpe:2.3:a:fatih:color:v1.15.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/fatih/color@v1.15.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:kOqh6YHBtK8aywxGerMG2Eq3H6Qgoqeo13Bk2Mv/nBs=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/fatih/color@v1.15.0?package-id=ec28771208351a6b", + "type": "library", + "name": "github.com/fatih/color", + "version": "v1.15.0", + "cpe": "cpe:2.3:a:fatih:color:v1.15.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/fatih/color@v1.15.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:kOqh6YHBtK8aywxGerMG2Eq3H6Qgoqeo13Bk2Mv/nBs=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/fatih/color@v1.15.0?package-id=90635408505c2cab", + "type": "library", + "name": "github.com/fatih/color", + "version": "v1.15.0", + "cpe": "cpe:2.3:a:fatih:color:v1.15.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/fatih/color@v1.15.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:kOqh6YHBtK8aywxGerMG2Eq3H6Qgoqeo13Bk2Mv/nBs=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/fatih/color@v1.15.0?package-id=41c4e853b593bb0d", + "type": "library", + "name": "github.com/fatih/color", + "version": "v1.15.0", + "cpe": "cpe:2.3:a:fatih:color:v1.15.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/fatih/color@v1.15.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:kOqh6YHBtK8aywxGerMG2Eq3H6Qgoqeo13Bk2Mv/nBs=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/fsnotify/fsnotify@v1.7.0?package-id=728a0556ce5c791a", + "type": "library", + "name": "github.com/fsnotify/fsnotify", + "version": "v1.7.0", + "cpe": "cpe:2.3:a:fsnotify:fsnotify:v1.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/fsnotify/fsnotify@v1.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:8JEhPFa5W2WU7YfeZzPNqzMP6Lwt7L2715Ggo0nosvA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/getsentry/sentry-go@v0.23.0?package-id=045e7909541edee5", + "type": "library", + "name": "github.com/getsentry/sentry-go", + "version": "v0.23.0", + "cpe": "cpe:2.3:a:getsentry:sentry-go:v0.23.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/getsentry/sentry-go@v0.23.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:getsentry:sentry_go:v0.23.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:dn+QRCeJv4pPt9OjVXiMcGIBIefaTJPw/h0bZWO05nE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/getsentry/sentry-go@v0.23.0?package-id=1528a74c2603af86", + "type": "library", + "name": "github.com/getsentry/sentry-go", + "version": "v0.23.0", + "cpe": "cpe:2.3:a:getsentry:sentry-go:v0.23.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/getsentry/sentry-go@v0.23.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:getsentry:sentry_go:v0.23.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:dn+QRCeJv4pPt9OjVXiMcGIBIefaTJPw/h0bZWO05nE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/getsentry/sentry-go@v0.23.0?package-id=b88984efc814bd49", + "type": "library", + "name": "github.com/getsentry/sentry-go", + "version": "v0.23.0", + "cpe": "cpe:2.3:a:getsentry:sentry-go:v0.23.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/getsentry/sentry-go@v0.23.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:getsentry:sentry_go:v0.23.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:dn+QRCeJv4pPt9OjVXiMcGIBIefaTJPw/h0bZWO05nE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/getsentry/sentry-go@v0.23.0?package-id=2db7db0fa20f3600", + "type": "library", + "name": "github.com/getsentry/sentry-go", + "version": "v0.23.0", + "cpe": "cpe:2.3:a:getsentry:sentry-go:v0.23.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/getsentry/sentry-go@v0.23.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:getsentry:sentry_go:v0.23.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:dn+QRCeJv4pPt9OjVXiMcGIBIefaTJPw/h0bZWO05nE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-jose/go-jose/v3@v3.0.1?package-id=d485b08b10e24583", + "type": "library", + "name": "github.com/go-jose/go-jose/v3", + "version": "v3.0.1", + "cpe": "cpe:2.3:a:go-jose:go-jose\\/v3:v3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-jose/go-jose/v3@v3.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go-jose:go_jose\\/v3:v3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_jose:go-jose\\/v3:v3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_jose:go_jose\\/v3:v3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:go-jose\\/v3:v3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:go_jose\\/v3:v3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:pWmKFVtt+Jl0vBZTIpz/eAKwsm6LkIxDVVbFHKkchhA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/aegis@v0.2.0?package-id=8e1f2f97b7df4c28", + "type": "library", + "name": "github.com/go-kratos/aegis", + "version": "v0.2.0", + "cpe": "cpe:2.3:a:go-kratos:aegis:v0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/aegis@v0.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:aegis:v0.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:aegis:v0.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:dObzCDWn3XVjUkgxyBp6ZeWtx/do0DPZ7LY3yNSJLUQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/kratos/contrib/log/zap/v2@v2.0.0-20230823024326-a09f4d8ebba9?package-id=4728d79f8c8db4f3", + "type": "library", + "name": "github.com/go-kratos/kratos/contrib/log/zap/v2", + "version": "v2.0.0-20230823024326-a09f4d8ebba9", + "cpe": "cpe:2.3:a:go-kratos:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/kratos/contrib/log/zap/v2@v2.0.0-20230823024326-a09f4d8ebba9", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:j7EHWoqShY20lGhhC1j6v6QkftAqLCBUCHGwDkHL8pU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/kratos/contrib/log/zap/v2@v2.0.0-20230823024326-a09f4d8ebba9?package-id=317beedf635a585a", + "type": "library", + "name": "github.com/go-kratos/kratos/contrib/log/zap/v2", + "version": "v2.0.0-20230823024326-a09f4d8ebba9", + "cpe": "cpe:2.3:a:go-kratos:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/kratos/contrib/log/zap/v2@v2.0.0-20230823024326-a09f4d8ebba9", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:j7EHWoqShY20lGhhC1j6v6QkftAqLCBUCHGwDkHL8pU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/kratos/contrib/log/zap/v2@v2.0.0-20230823024326-a09f4d8ebba9?package-id=7be84dcec7261290", + "type": "library", + "name": "github.com/go-kratos/kratos/contrib/log/zap/v2", + "version": "v2.0.0-20230823024326-a09f4d8ebba9", + "cpe": "cpe:2.3:a:go-kratos:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/kratos/contrib/log/zap/v2@v2.0.0-20230823024326-a09f4d8ebba9", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:j7EHWoqShY20lGhhC1j6v6QkftAqLCBUCHGwDkHL8pU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/kratos/contrib/log/zap/v2@v2.0.0-20230823024326-a09f4d8ebba9?package-id=043b573391ef401c", + "type": "library", + "name": "github.com/go-kratos/kratos/contrib/log/zap/v2", + "version": "v2.0.0-20230823024326-a09f4d8ebba9", + "cpe": "cpe:2.3:a:go-kratos:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/kratos/contrib/log/zap/v2@v2.0.0-20230823024326-a09f4d8ebba9", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:j7EHWoqShY20lGhhC1j6v6QkftAqLCBUCHGwDkHL8pU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/kratos/v2@v2.7.0?package-id=4090a6172f98e169", + "type": "library", + "name": "github.com/go-kratos/kratos/v2", + "version": "v2.7.0", + "cpe": "cpe:2.3:a:go-kratos:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/kratos/v2@v2.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:9DaVgU9YoHPb/BxDVqeVlVCMduRhiSewG3xE+e9ZAZ8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/kratos/v2@v2.7.0?package-id=ae839db7f88fe67d", + "type": "library", + "name": "github.com/go-kratos/kratos/v2", + "version": "v2.7.0", + "cpe": "cpe:2.3:a:go-kratos:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/kratos/v2@v2.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:9DaVgU9YoHPb/BxDVqeVlVCMduRhiSewG3xE+e9ZAZ8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/kratos/v2@v2.7.0?package-id=a5b157e0f92ec487", + "type": "library", + "name": "github.com/go-kratos/kratos/v2", + "version": "v2.7.0", + "cpe": "cpe:2.3:a:go-kratos:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/kratos/v2@v2.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:9DaVgU9YoHPb/BxDVqeVlVCMduRhiSewG3xE+e9ZAZ8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/kratos/v2@v2.7.0?package-id=e450502a3a4aa668", + "type": "library", + "name": "github.com/go-kratos/kratos/v2", + "version": "v2.7.0", + "cpe": "cpe:2.3:a:go-kratos:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/kratos/v2@v2.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:9DaVgU9YoHPb/BxDVqeVlVCMduRhiSewG3xE+e9ZAZ8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-openapi/inflect@v0.19.0?package-id=289a2f1dfd0d68b5", + "type": "library", + "name": "github.com/go-openapi/inflect", + "version": "v0.19.0", + "cpe": "cpe:2.3:a:go-openapi:inflect:v0.19.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-openapi/inflect@v0.19.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_openapi:inflect:v0.19.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:inflect:v0.19.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:9jCH9scKIbHeV9m12SmPilScz6krDxKRasNNSNPXu/4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-playground/form/v4@v4.2.1?package-id=58aa8de83c451d13", + "type": "library", + "name": "github.com/go-playground/form/v4", + "version": "v4.2.1", + "cpe": "cpe:2.3:a:go-playground:form\\/v4:v4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-playground/form/v4@v4.2.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_playground:form\\/v4:v4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:form\\/v4:v4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:HjdRDKO0fftVMU5epjPW2SOREcZ6/wLUzEobqUGJuPw=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.0?package-id=12f14633fda10026", + "type": "library", + "name": "github.com/golang-jwt/jwt/v4", + "version": "v4.5.0", + "cpe": "cpe:2.3:a:golang-jwt:jwt\\/v4:v4.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:golang_jwt:jwt\\/v4:v4.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:golang:jwt\\/v4:v4.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:7cYmW1XlMY7h7ii7UhUyChSgS5wUJEnm9uZVTGqOWzg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.0.0?package-id=654ff9f540b96d15", + "type": "library", + "name": "github.com/golang-jwt/jwt/v5", + "version": "v5.0.0", + "cpe": "cpe:2.3:a:golang-jwt:jwt\\/v5:v5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:golang_jwt:jwt\\/v5:v5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:golang:jwt\\/v5:v5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:1n1XNM9hk7O9mnQoNBGolZvzebBQ7p93ULHRc28XJUE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da?package-id=c2258538dc9e6bea", + "type": "library", + "name": "github.com/golang/groupcache", + "version": "v0.0.0-20210331224755-41bb18bfe9da", + "cpe": "cpe:2.3:a:golang:groupcache:v0.0.0-20210331224755-41bb18bfe9da:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:oI5xCqsCo564l8iNU+DwB5epxmsaqB+rhGL0m5jtYqE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.3?package-id=b024cc583c20e2a8", + "type": "library", + "name": "github.com/golang/protobuf", + "version": "v1.5.3", + "cpe": "cpe:2.3:a:golang:protobuf:v1.5.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.5.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:KhyjKVUg7Usr/dYsdSqoFveMYd5ko72D+zANwlG1mmg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.3?package-id=3a2b1686eb054762", + "type": "library", + "name": "github.com/golang/protobuf", + "version": "v1.5.3", + "cpe": "cpe:2.3:a:golang:protobuf:v1.5.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.5.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:KhyjKVUg7Usr/dYsdSqoFveMYd5ko72D+zANwlG1mmg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.3?package-id=780004816bf4b0da", + "type": "library", + "name": "github.com/golang/protobuf", + "version": "v1.5.3", + "cpe": "cpe:2.3:a:golang:protobuf:v1.5.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.5.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:KhyjKVUg7Usr/dYsdSqoFveMYd5ko72D+zANwlG1mmg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.3?package-id=ee5a1f033d83e402", + "type": "library", + "name": "github.com/golang/protobuf", + "version": "v1.5.3", + "cpe": "cpe:2.3:a:golang:protobuf:v1.5.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.5.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:KhyjKVUg7Usr/dYsdSqoFveMYd5ko72D+zANwlG1mmg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.6.0?package-id=f17f71e539547ce0", + "type": "library", + "name": "github.com/google/go-cmp", + "version": "v0.6.0", + "cpe": "cpe:2.3:a:google:go-cmp:v0.6.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/go-cmp@v0.6.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:google:go_cmp:v0.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/google/go-containerregistry@v0.16.1?package-id=02d241ef7836979c", + "type": "library", + "name": "github.com/google/go-containerregistry", + "version": "v0.16.1", + "cpe": "cpe:2.3:a:google:go-containerregistry:v0.16.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/go-containerregistry@v0.16.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:google:go_containerregistry:v0.16.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:rUEt426sR6nyrL3gt+18ibRcvYpKYdpsa5ZW7MA08dQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/google/go-containerregistry@v0.16.1?package-id=74e42b7bf03d608d", + "type": "library", + "name": "github.com/google/go-containerregistry", + "version": "v0.16.1", + "cpe": "cpe:2.3:a:google:go-containerregistry:v0.16.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/go-containerregistry@v0.16.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:google:go_containerregistry:v0.16.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:rUEt426sR6nyrL3gt+18ibRcvYpKYdpsa5ZW7MA08dQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/google/go-containerregistry@v0.16.1?package-id=bc149772d83bba49", + "type": "library", + "name": "github.com/google/go-containerregistry", + "version": "v0.16.1", + "cpe": "cpe:2.3:a:google:go-containerregistry:v0.16.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/go-containerregistry@v0.16.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:google:go_containerregistry:v0.16.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:rUEt426sR6nyrL3gt+18ibRcvYpKYdpsa5ZW7MA08dQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/google/go-containerregistry@v0.16.1?package-id=7bf6a2c174bce63c", + "type": "library", + "name": "github.com/google/go-containerregistry", + "version": "v0.16.1", + "cpe": "cpe:2.3:a:google:go-containerregistry:v0.16.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/go-containerregistry@v0.16.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:google:go_containerregistry:v0.16.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:rUEt426sR6nyrL3gt+18ibRcvYpKYdpsa5ZW7MA08dQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/google/s2a-go@v0.1.7?package-id=265835a42feeb6ca", + "type": "library", + "name": "github.com/google/s2a-go", + "version": "v0.1.7", + "cpe": "cpe:2.3:a:google:s2a-go:v0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/s2a-go@v0.1.7", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:google:s2a_go:v0.1.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:60BLSyTrOV4/haCDW4zb1guZItoSq8foHCXrAnjBo/o=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/google/uuid@v1.4.0?package-id=ed870ed005991d82", + "type": "library", + "name": "github.com/google/uuid", + "version": "v1.4.0", + "cpe": "cpe:2.3:a:google:uuid:v1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/uuid@v1.4.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:MtMxsa51/r9yyhkyLsVeVt0B+BGQZzpQiTQ4eHZ8bc4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/google/wire@v0.5.0?package-id=787b86e895ad56f1", + "type": "library", + "name": "github.com/google/wire", + "version": "v0.5.0", + "cpe": "cpe:2.3:a:google:wire:v0.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/wire@v0.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:I7ELFeVBr3yfPIcc8+MWvrjk+3VjbcSzoXm3JVa+jD8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.2?package-id=8584b7cf943f4058", + "type": "library", + "name": "github.com/googleapis/enterprise-certificate-proxy", + "version": "v0.3.2", + "cpe": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Vie5ybvEvT75RniqhfFxPRy3Bf7vr3h0cechB90XaQs=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/googleapis/gax-go/v2@v2.12.0?package-id=f69a55c247a8b18d", + "type": "library", + "name": "github.com/googleapis/gax-go/v2", + "version": "v2.12.0", + "cpe": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.12.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/googleapis/gax-go/v2@v2.12.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:googleapis:gax_go\\/v2:v2.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:A+gCJKdRfqXkr+BIRGtZLibNXf0m1f9E4HG56etFpas=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/gorilla/mux@v1.8.0?package-id=6129c87581ddc58a", + "type": "library", + "name": "github.com/gorilla/mux", + "version": "v1.8.0", + "cpe": "cpe:2.3:a:gorilla:mux:v1.8.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gorilla/mux@v1.8.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:i40aqfkR1h2SlN9hojwV5ZA91wcXFOvkdNIeFDP5koI=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/grpc-ecosystem/go-grpc-middleware@v1.4.0?package-id=5e6f93c1db1c9d94", + "type": "library", + "name": "github.com/grpc-ecosystem/go-grpc-middleware", + "version": "v1.4.0", + "cpe": "cpe:2.3:a:grpc-ecosystem:go-grpc-middleware:v1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/grpc-ecosystem/go-grpc-middleware@v1.4.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc-ecosystem:go_grpc_middleware:v1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc_ecosystem:go-grpc-middleware:v1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc_ecosystem:go_grpc_middleware:v1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc:go-grpc-middleware:v1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc:go_grpc_middleware:v1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:UH//fgunKIs4JdUbpDl1VZCDaL56wXCB/5+wF6uHfaI=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/grpc-ecosystem/go-grpc-prometheus@v1.2.0?package-id=9fa58b5ce80ba78a", + "type": "library", + "name": "github.com/grpc-ecosystem/go-grpc-prometheus", + "version": "v1.2.0", + "cpe": "cpe:2.3:a:grpc-ecosystem:go-grpc-prometheus:v1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/grpc-ecosystem/go-grpc-prometheus@v1.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc-ecosystem:go_grpc_prometheus:v1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc_ecosystem:go-grpc-prometheus:v1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc_ecosystem:go_grpc_prometheus:v1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc:go-grpc-prometheus:v1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc:go_grpc_prometheus:v1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Ovs26xHkKqVztRpIrF/92BcuyuQ/YW4NSIpoGtfXNho=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0?package-id=1c59068ffdcfd1cd", + "type": "library", + "name": "github.com/hashicorp/errwrap", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2?package-id=501fb5a55e961e3d", + "type": "library", + "name": "github.com/hashicorp/go-cleanhttp", + "version": "v0.5.2", + "cpe": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-hclog@v1.5.0?package-id=7b6e718ddd909d39", + "type": "library", + "name": "github.com/hashicorp/go-hclog", + "version": "v1.5.0", + "cpe": "cpe:2.3:a:hashicorp:go-hclog:v1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-hclog@v1.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_hclog:v1.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:bI2ocEMgcVlz55Oj1xZNBsVi900c7II+fWDyV9o+13c=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-hclog@v1.5.0?package-id=ee46c99ffdd7d6ed", + "type": "library", + "name": "github.com/hashicorp/go-hclog", + "version": "v1.5.0", + "cpe": "cpe:2.3:a:hashicorp:go-hclog:v1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-hclog@v1.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_hclog:v1.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:bI2ocEMgcVlz55Oj1xZNBsVi900c7II+fWDyV9o+13c=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-hclog@v1.5.0?package-id=653e77e41469c1ef", + "type": "library", + "name": "github.com/hashicorp/go-hclog", + "version": "v1.5.0", + "cpe": "cpe:2.3:a:hashicorp:go-hclog:v1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-hclog@v1.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_hclog:v1.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:bI2ocEMgcVlz55Oj1xZNBsVi900c7II+fWDyV9o+13c=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-hclog@v1.5.0?package-id=ddab282552a53236", + "type": "library", + "name": "github.com/hashicorp/go-hclog", + "version": "v1.5.0", + "cpe": "cpe:2.3:a:hashicorp:go-hclog:v1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-hclog@v1.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_hclog:v1.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:bI2ocEMgcVlz55Oj1xZNBsVi900c7II+fWDyV9o+13c=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1?package-id=3864865c5f214cb3", + "type": "library", + "name": "github.com/hashicorp/go-multierror", + "version": "v1.1.1", + "cpe": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-plugin@v1.4.10?package-id=2d0a24843f1023ee", + "type": "library", + "name": "github.com/hashicorp/go-plugin", + "version": "v1.4.10", + "cpe": "cpe:2.3:a:hashicorp:go-plugin:v1.4.10:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-plugin@v1.4.10", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_plugin:v1.4.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:xUbmA4jC6Dq163/fWcp8P3JuHilrHHMLNRxzGQJ9hNk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-plugin@v1.4.10?package-id=45d2769961e4d749", + "type": "library", + "name": "github.com/hashicorp/go-plugin", + "version": "v1.4.10", + "cpe": "cpe:2.3:a:hashicorp:go-plugin:v1.4.10:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-plugin@v1.4.10", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_plugin:v1.4.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:xUbmA4jC6Dq163/fWcp8P3JuHilrHHMLNRxzGQJ9hNk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-plugin@v1.4.10?package-id=6fd5eb73bf7b8c4d", + "type": "library", + "name": "github.com/hashicorp/go-plugin", + "version": "v1.4.10", + "cpe": "cpe:2.3:a:hashicorp:go-plugin:v1.4.10:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-plugin@v1.4.10", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_plugin:v1.4.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:xUbmA4jC6Dq163/fWcp8P3JuHilrHHMLNRxzGQJ9hNk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-plugin@v1.4.10?package-id=e00533dc215afacd", + "type": "library", + "name": "github.com/hashicorp/go-plugin", + "version": "v1.4.10", + "cpe": "cpe:2.3:a:hashicorp:go-plugin:v1.4.10:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-plugin@v1.4.10", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_plugin:v1.4.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:xUbmA4jC6Dq163/fWcp8P3JuHilrHHMLNRxzGQJ9hNk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.4?package-id=b4a9ec70d89ec36e", + "type": "library", + "name": "github.com/hashicorp/go-retryablehttp", + "version": "v0.7.4", + "cpe": "cpe:2.3:a:hashicorp:go-retryablehttp:v0.7.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_retryablehttp:v0.7.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ZQgVdpTdAL7WpMIwLzCfbalOcSUdkDZnpUv3/+BxzFA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-rootcerts@v1.0.2?package-id=252294a025922c50", + "type": "library", + "name": "github.com/hashicorp/go-rootcerts", + "version": "v1.0.2", + "cpe": "cpe:2.3:a:hashicorp:go-rootcerts:v1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-rootcerts@v1.0.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_rootcerts:v1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jzhAVGtqPKbwpyCPELlgNWhE1znq+qwJtW5Oi2viEzc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.1.7?package-id=519e70fdc958ebf1", + "type": "library", + "name": "github.com/hashicorp/go-secure-stdlib/parseutil", + "version": "v0.1.7", + "cpe": "cpe:2.3:a:hashicorp:go-secure-stdlib\\/parseutil:v0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.1.7", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_secure_stdlib\\/parseutil:v0.1.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:UpiO20jno/eV1eVZcxqWnUohyKRe1g8FPV/xH1s/2qs=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2?package-id=991aeda9dce2fe56", + "type": "library", + "name": "github.com/hashicorp/go-secure-stdlib/strutil", + "version": "v0.1.2", + "cpe": "cpe:2.3:a:hashicorp:go-secure-stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_secure_stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:kes8mmyCpxJsI7FTwtzRqEy9CdjCtrXrXGuOpxEA7Ts=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.5?package-id=23e13ad425ad6e5c", + "type": "library", + "name": "github.com/hashicorp/go-sockaddr", + "version": "v1.0.5", + "cpe": "cpe:2.3:a:hashicorp:go-sockaddr:v1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.5", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_sockaddr:v1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:dvk7TIXCZpmfOlM+9mlcrWmWjw/wlKT+VDq2wMvfPJU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-5?package-id=dc55449089a6c8e5", + "type": "library", + "name": "github.com/hashicorp/hcl", + "version": "v1.0.1-vault-5", + "cpe": "cpe:2.3:a:hashicorp:hcl:v1.0.1-vault-5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-5", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:kI3hhbbyzr4dldA8UdTb7ZlVVlI2DACdCfz31RPDgJM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/hcl/v2@v2.17.0?package-id=706b1f07ea77cde8", + "type": "library", + "name": "github.com/hashicorp/hcl/v2", + "version": "v2.17.0", + "cpe": "cpe:2.3:a:hashicorp:hcl\\/v2:v2.17.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/hcl/v2@v2.17.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:z1XvSUyXd1HP10U4lrLg5e0JMVz6CPaJvAgxM0KNZVY=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/vault/api@v1.10.0?package-id=2d00d7594abd3443", + "type": "library", + "name": "github.com/hashicorp/vault/api", + "version": "v1.10.0", + "cpe": "cpe:2.3:a:hashicorp:vault\\/api:v1.10.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/vault/api@v1.10.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:/US7sIjWN6Imp4o/Rj1Ce2Nr5bki/AXi9vAW3p2tOJQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/yamux@v0.1.1?package-id=8177feea2ed1d616", + "type": "library", + "name": "github.com/hashicorp/yamux", + "version": "v0.1.1", + "cpe": "cpe:2.3:a:hashicorp:yamux:v0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/yamux@v0.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:yrQxtgseBDrq9Y652vSRDvsKCJKOUD+GzTS4Y0Y8pvE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/yamux@v0.1.1?package-id=07ca978ec5c9a360", + "type": "library", + "name": "github.com/hashicorp/yamux", + "version": "v0.1.1", + "cpe": "cpe:2.3:a:hashicorp:yamux:v0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/yamux@v0.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:yrQxtgseBDrq9Y652vSRDvsKCJKOUD+GzTS4Y0Y8pvE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/yamux@v0.1.1?package-id=7d8cd718d2be8437", + "type": "library", + "name": "github.com/hashicorp/yamux", + "version": "v0.1.1", + "cpe": "cpe:2.3:a:hashicorp:yamux:v0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/yamux@v0.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:yrQxtgseBDrq9Y652vSRDvsKCJKOUD+GzTS4Y0Y8pvE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/yamux@v0.1.1?package-id=771c0af0d56eb159", + "type": "library", + "name": "github.com/hashicorp/yamux", + "version": "v0.1.1", + "cpe": "cpe:2.3:a:hashicorp:yamux:v0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/yamux@v0.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:yrQxtgseBDrq9Y652vSRDvsKCJKOUD+GzTS4Y0Y8pvE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hedwigz/entviz@v0.0.0-20221011080911-9d47f6f1d818?package-id=5068dba1bb56ca6a", + "type": "library", + "name": "github.com/hedwigz/entviz", + "version": "v0.0.0-20221011080911-9d47f6f1d818", + "cpe": "cpe:2.3:a:hedwigz:entviz:v0.0.0-20221011080911-9d47f6f1d818:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hedwigz/entviz@v0.0.0-20221011080911-9d47f6f1d818", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:IIK1IY/v9aqVpaNXTr/rkoEnOc4rH3KbPYZYZLP3N04=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/iancoleman/orderedmap@v0.3.0?package-id=185ad0411659e93b", + "type": "library", + "name": "github.com/iancoleman/orderedmap", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:iancoleman:orderedmap:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/iancoleman/orderedmap@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:5cbR2grmZR/DiVt+VJopEhtVs9YGInGIxAoMJn+Ichc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/iancoleman/orderedmap@v0.3.0?package-id=d5726afa02a72504", + "type": "library", + "name": "github.com/iancoleman/orderedmap", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:iancoleman:orderedmap:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/iancoleman/orderedmap@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:5cbR2grmZR/DiVt+VJopEhtVs9YGInGIxAoMJn+Ichc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/iancoleman/orderedmap@v0.3.0?package-id=d642378509211a21", + "type": "library", + "name": "github.com/iancoleman/orderedmap", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:iancoleman:orderedmap:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/iancoleman/orderedmap@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:5cbR2grmZR/DiVt+VJopEhtVs9YGInGIxAoMJn+Ichc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/iancoleman/orderedmap@v0.3.0?package-id=c3c3818f5d8afe8b", + "type": "library", + "name": "github.com/iancoleman/orderedmap", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:iancoleman:orderedmap:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/iancoleman/orderedmap@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:5cbR2grmZR/DiVt+VJopEhtVs9YGInGIxAoMJn+Ichc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/imdario/mergo@v0.3.16?package-id=170cddbb5b28a932", + "type": "library", + "name": "github.com/imdario/mergo", + "version": "v0.3.16", + "cpe": "cpe:2.3:a:imdario:mergo:v0.3.16:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/imdario/mergo@v0.3.16", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:wwQJbIsHYGMUyLSPrEq1CT16AhnhNJQ51+4fdHUnCl4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/improbable-eng/grpc-web@v0.15.0?package-id=cae4f5c6d580dd35", + "type": "library", + "name": "github.com/improbable-eng/grpc-web", + "version": "v0.15.0", + "cpe": "cpe:2.3:a:improbable-eng:grpc-web:v0.15.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/improbable-eng/grpc-web@v0.15.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:improbable-eng:grpc_web:v0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:improbable_eng:grpc-web:v0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:improbable_eng:grpc_web:v0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:improbable:grpc-web:v0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:improbable:grpc_web:v0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:BN+7z6uNXZ1tQGcNAuaU1YjsLTApzkjt2tzCixLaUPQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/in-toto/attestation@v0.1.1-0.20231010121940-09a03152c04a?package-id=529628437f52b006", + "type": "library", + "name": "github.com/in-toto/attestation", + "version": "v0.1.1-0.20231010121940-09a03152c04a", + "cpe": "cpe:2.3:a:in-toto:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/in-toto/attestation@v0.1.1-0.20231010121940-09a03152c04a", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:in_toto:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:in:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:y4ZRSC/GJWAFi+u9t7sNxjNsQKQvFKca1qc3Wr1ZX6Q=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/in-toto/attestation@v0.1.1-0.20231010121940-09a03152c04a?package-id=84d90143f8175704", + "type": "library", + "name": "github.com/in-toto/attestation", + "version": "v0.1.1-0.20231010121940-09a03152c04a", + "cpe": "cpe:2.3:a:in-toto:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/in-toto/attestation@v0.1.1-0.20231010121940-09a03152c04a", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:in_toto:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:in:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:y4ZRSC/GJWAFi+u9t7sNxjNsQKQvFKca1qc3Wr1ZX6Q=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/in-toto/attestation@v0.1.1-0.20231010121940-09a03152c04a?package-id=1a7282217ffdcdf3", + "type": "library", + "name": "github.com/in-toto/attestation", + "version": "v0.1.1-0.20231010121940-09a03152c04a", + "cpe": "cpe:2.3:a:in-toto:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/in-toto/attestation@v0.1.1-0.20231010121940-09a03152c04a", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:in_toto:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:in:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:y4ZRSC/GJWAFi+u9t7sNxjNsQKQvFKca1qc3Wr1ZX6Q=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/in-toto/attestation@v0.1.1-0.20231010121940-09a03152c04a?package-id=14f84f5dadfa1f30", + "type": "library", + "name": "github.com/in-toto/attestation", + "version": "v0.1.1-0.20231010121940-09a03152c04a", + "cpe": "cpe:2.3:a:in-toto:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/in-toto/attestation@v0.1.1-0.20231010121940-09a03152c04a", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:in_toto:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:in:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:y4ZRSC/GJWAFi+u9t7sNxjNsQKQvFKca1qc3Wr1ZX6Q=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/invopop/jsonschema@v0.7.0?package-id=035710c852e5c0cc", + "type": "library", + "name": "github.com/invopop/jsonschema", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:invopop:jsonschema:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/invopop/jsonschema@v0.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:2vgQcBz1n256N+FpX3Jq7Y17AjYt46Ig3zIWyy770So=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/invopop/jsonschema@v0.7.0?package-id=7aa1bf2b0f67bd7b", + "type": "library", + "name": "github.com/invopop/jsonschema", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:invopop:jsonschema:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/invopop/jsonschema@v0.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:2vgQcBz1n256N+FpX3Jq7Y17AjYt46Ig3zIWyy770So=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/invopop/jsonschema@v0.7.0?package-id=711e91a510db5087", + "type": "library", + "name": "github.com/invopop/jsonschema", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:invopop:jsonschema:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/invopop/jsonschema@v0.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:2vgQcBz1n256N+FpX3Jq7Y17AjYt46Ig3zIWyy770So=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/invopop/jsonschema@v0.7.0?package-id=2da4be1610d9cdf4", + "type": "library", + "name": "github.com/invopop/jsonschema", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:invopop:jsonschema:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/invopop/jsonschema@v0.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:2vgQcBz1n256N+FpX3Jq7Y17AjYt46Ig3zIWyy770So=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/jackc/pgpassfile@v1.0.0?package-id=40b72b18254a790f", + "type": "library", + "name": "github.com/jackc/pgpassfile", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:jackc:pgpassfile:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jackc/pgpassfile@v1.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:/6Hmqy13Ss2zCq62VdNG8tM1wchn8zjSGOBJ6icpsIM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/jackc/pgservicefile@v0.0.0-20221227161230-091c0ba34f0a?package-id=5fbb5129fc6f29a1", + "type": "library", + "name": "github.com/jackc/pgservicefile", + "version": "v0.0.0-20221227161230-091c0ba34f0a", + "cpe": "cpe:2.3:a:jackc:pgservicefile:v0.0.0-20221227161230-091c0ba34f0a:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jackc/pgservicefile@v0.0.0-20221227161230-091c0ba34f0a", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:bbPeKD0xmW/Y25WS6cokEszi5g+S0QxI/d45PkRi7Nk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/jackc/pgx/v5@v5.4.3?package-id=b0784d9101783bee", + "type": "library", + "name": "github.com/jackc/pgx/v5", + "version": "v5.4.3", + "cpe": "cpe:2.3:a:jackc:pgx\\/v5:v5.4.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jackc/pgx/v5@v5.4.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:cxFyXhxlvAifxnkKKdlxv8XqUf59tDlYjnV5YYfsJJY=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7?package-id=6252410ef7219e92", + "type": "library", + "name": "github.com/jedib0t/go-pretty/v6", + "version": "v6.4.7", + "cpe": "cpe:2.3:a:jedib0t:go-pretty\\/v6:v6.4.7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jedib0t:go_pretty\\/v6:v6.4.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lwiTJr1DEkAgzljsUsORmWsVn5MQjt1BPJdPCtJ6KXE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7?package-id=568ddb435a4507d6", + "type": "library", + "name": "github.com/jedib0t/go-pretty/v6", + "version": "v6.4.7", + "cpe": "cpe:2.3:a:jedib0t:go-pretty\\/v6:v6.4.7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jedib0t:go_pretty\\/v6:v6.4.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lwiTJr1DEkAgzljsUsORmWsVn5MQjt1BPJdPCtJ6KXE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7?package-id=7ede02e2a76526c1", + "type": "library", + "name": "github.com/jedib0t/go-pretty/v6", + "version": "v6.4.7", + "cpe": "cpe:2.3:a:jedib0t:go-pretty\\/v6:v6.4.7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jedib0t:go_pretty\\/v6:v6.4.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lwiTJr1DEkAgzljsUsORmWsVn5MQjt1BPJdPCtJ6KXE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7?package-id=622b3af4eb969233", + "type": "library", + "name": "github.com/jedib0t/go-pretty/v6", + "version": "v6.4.7", + "cpe": "cpe:2.3:a:jedib0t:go-pretty\\/v6:v6.4.7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jedib0t:go_pretty\\/v6:v6.4.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lwiTJr1DEkAgzljsUsORmWsVn5MQjt1BPJdPCtJ6KXE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/jmespath/go-jmespath@v0.4.0?package-id=72d7cf810d915842", + "type": "library", + "name": "github.com/jmespath/go-jmespath", + "version": "v0.4.0", + "cpe": "cpe:2.3:a:jmespath:go-jmespath:v0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jmespath/go-jmespath@v0.4.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jmespath:go_jmespath:v0.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/klauspost/compress@v1.17.2?package-id=b6642d6183fa6e7e", + "type": "library", + "name": "github.com/klauspost/compress", + "version": "v1.17.2", + "cpe": "cpe:2.3:a:klauspost:compress:v1.17.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/klauspost/compress@v1.17.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:RlWWUY/Dr4fL8qk9YG7DTZ7PDgME2V4csBXA8L/ixi4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/kylelemons/godebug@v1.1.0?package-id=034c3d863ccc93fc", + "type": "library", + "name": "github.com/kylelemons/godebug", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:kylelemons:godebug:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/kylelemons/godebug@v1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-colorable@v0.1.13?package-id=ba67eb830e8cd07f", + "type": "library", + "name": "github.com/mattn/go-colorable", + "version": "v0.1.13", + "cpe": "cpe:2.3:a:mattn:go-colorable:v0.1.13:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.13", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_colorable:v0.1.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-colorable@v0.1.13?package-id=181e73e676a67383", + "type": "library", + "name": "github.com/mattn/go-colorable", + "version": "v0.1.13", + "cpe": "cpe:2.3:a:mattn:go-colorable:v0.1.13:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.13", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_colorable:v0.1.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-colorable@v0.1.13?package-id=d5c1c50fe4921646", + "type": "library", + "name": "github.com/mattn/go-colorable", + "version": "v0.1.13", + "cpe": "cpe:2.3:a:mattn:go-colorable:v0.1.13:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.13", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_colorable:v0.1.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-colorable@v0.1.13?package-id=6a6b341c5baf899e", + "type": "library", + "name": "github.com/mattn/go-colorable", + "version": "v0.1.13", + "cpe": "cpe:2.3:a:mattn:go-colorable:v0.1.13:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.13", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_colorable:v0.1.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.19?package-id=76acab36c74c9ad2", + "type": "library", + "name": "github.com/mattn/go-isatty", + "version": "v0.0.19", + "cpe": "cpe:2.3:a:mattn:go-isatty:v0.0.19:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.19", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_isatty:v0.0.19:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:JITubQf0MOLdlGRuRq+jtsDlekdYPia9ZFsB8h/APPA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.19?package-id=b48201623611b494", + "type": "library", + "name": "github.com/mattn/go-isatty", + "version": "v0.0.19", + "cpe": "cpe:2.3:a:mattn:go-isatty:v0.0.19:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.19", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_isatty:v0.0.19:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:JITubQf0MOLdlGRuRq+jtsDlekdYPia9ZFsB8h/APPA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.19?package-id=c53ace3b4d4f08fd", + "type": "library", + "name": "github.com/mattn/go-isatty", + "version": "v0.0.19", + "cpe": "cpe:2.3:a:mattn:go-isatty:v0.0.19:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.19", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_isatty:v0.0.19:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:JITubQf0MOLdlGRuRq+jtsDlekdYPia9ZFsB8h/APPA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.19?package-id=03566c9ab5871fbc", + "type": "library", + "name": "github.com/mattn/go-isatty", + "version": "v0.0.19", + "cpe": "cpe:2.3:a:mattn:go-isatty:v0.0.19:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.19", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_isatty:v0.0.19:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:JITubQf0MOLdlGRuRq+jtsDlekdYPia9ZFsB8h/APPA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15?package-id=51d96c9851fd4731", + "type": "library", + "name": "github.com/mattn/go-runewidth", + "version": "v0.0.15", + "cpe": "cpe:2.3:a:mattn:go-runewidth:v0.0.15:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_runewidth:v0.0.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:UNAjwbU9l54TA3KzvqLGxwWjHmMgBUVhBiTjelZgg3U=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15?package-id=030f03222956c418", + "type": "library", + "name": "github.com/mattn/go-runewidth", + "version": "v0.0.15", + "cpe": "cpe:2.3:a:mattn:go-runewidth:v0.0.15:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_runewidth:v0.0.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:UNAjwbU9l54TA3KzvqLGxwWjHmMgBUVhBiTjelZgg3U=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15?package-id=b2dbc52834961291", + "type": "library", + "name": "github.com/mattn/go-runewidth", + "version": "v0.0.15", + "cpe": "cpe:2.3:a:mattn:go-runewidth:v0.0.15:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_runewidth:v0.0.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:UNAjwbU9l54TA3KzvqLGxwWjHmMgBUVhBiTjelZgg3U=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15?package-id=6be8ac9e8c1b6b7c", + "type": "library", + "name": "github.com/mattn/go-runewidth", + "version": "v0.0.15", + "cpe": "cpe:2.3:a:mattn:go-runewidth:v0.0.15:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_runewidth:v0.0.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:UNAjwbU9l54TA3KzvqLGxwWjHmMgBUVhBiTjelZgg3U=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/matttproud/golang_protobuf_extensions/v2@v2.0.0?package-id=9f8de9a4b0fce2d2", + "type": "library", + "name": "github.com/matttproud/golang_protobuf_extensions/v2", + "version": "v2.0.0", + "cpe": "cpe:2.3:a:matttproud:golang-protobuf-extensions\\/v2:v2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/matttproud/golang_protobuf_extensions/v2@v2.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:matttproud:golang_protobuf_extensions\\/v2:v2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jWpvCLoY8Z/e3VKvlsiIGKtc+UG6U5vzxaoagmhXfyg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0?package-id=bf10ca687e280acc", + "type": "library", + "name": "github.com/mitchellh/go-homedir", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:mitchellh:go-homedir:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mitchellh:go_homedir:v1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mitchellh/go-testing-interface@v1.14.1?package-id=d835d37e22d7bfc6", + "type": "library", + "name": "github.com/mitchellh/go-testing-interface", + "version": "v1.14.1", + "cpe": "cpe:2.3:a:mitchellh:go-testing-interface:v1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/go-testing-interface@v1.14.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mitchellh:go_testing_interface:v1.14.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jrgshOhYAUVNMAJiKbEu7EqAwgJJ2JqpQmpLJOu07cU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mitchellh/go-testing-interface@v1.14.1?package-id=b2baba17dbf58921", + "type": "library", + "name": "github.com/mitchellh/go-testing-interface", + "version": "v1.14.1", + "cpe": "cpe:2.3:a:mitchellh:go-testing-interface:v1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/go-testing-interface@v1.14.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mitchellh:go_testing_interface:v1.14.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jrgshOhYAUVNMAJiKbEu7EqAwgJJ2JqpQmpLJOu07cU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mitchellh/go-testing-interface@v1.14.1?package-id=e5e5f80aac76aef8", + "type": "library", + "name": "github.com/mitchellh/go-testing-interface", + "version": "v1.14.1", + "cpe": "cpe:2.3:a:mitchellh:go-testing-interface:v1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/go-testing-interface@v1.14.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mitchellh:go_testing_interface:v1.14.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jrgshOhYAUVNMAJiKbEu7EqAwgJJ2JqpQmpLJOu07cU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mitchellh/go-testing-interface@v1.14.1?package-id=f375eae2fe488957", + "type": "library", + "name": "github.com/mitchellh/go-testing-interface", + "version": "v1.14.1", + "cpe": "cpe:2.3:a:mitchellh:go-testing-interface:v1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/go-testing-interface@v1.14.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mitchellh:go_testing_interface:v1.14.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jrgshOhYAUVNMAJiKbEu7EqAwgJJ2JqpQmpLJOu07cU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1?package-id=c18eddaed70bb25c", + "type": "library", + "name": "github.com/mitchellh/go-wordwrap", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:mitchellh:go-wordwrap:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mitchellh:go_wordwrap:v1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:TLuKupo69TCn6TQSyGxwI1EblZZEsQ0vMlAFQflz0v0=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.0?package-id=26c3d47653655ad0", + "type": "library", + "name": "github.com/mitchellh/mapstructure", + "version": "v1.5.0", + "cpe": "cpe:2.3:a:mitchellh:mapstructure:v1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jeMsZIYE/09sWLaz43PL7Gy6RuMjD2eJVyuac5Z2hdY=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/moby/moby@v24.0.5+incompatible?package-id=a21d338c2cd1ab2c", + "type": "library", + "name": "github.com/moby/moby", + "version": "v24.0.5+incompatible", + "cpe": "cpe:2.3:a:moby:moby:v24.0.5\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/moby/moby@v24.0.5+incompatible", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:uUbydai/Y9J7Ybt+lFI3zBdnsMYXnXE9vEcfZDoEE8Q=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/muesli/reflow@v0.3.0?package-id=26c5bd787e49c7c1", + "type": "library", + "name": "github.com/muesli/reflow", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:muesli:reflow:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/muesli/reflow@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:IFsN6K9NfGtjeggFP+68I4chLZV2yIKsXJFNZ+eWh6s=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/muesli/reflow@v0.3.0?package-id=ce4bb77a761a0e34", + "type": "library", + "name": "github.com/muesli/reflow", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:muesli:reflow:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/muesli/reflow@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:IFsN6K9NfGtjeggFP+68I4chLZV2yIKsXJFNZ+eWh6s=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/muesli/reflow@v0.3.0?package-id=4345390b16e0bd85", + "type": "library", + "name": "github.com/muesli/reflow", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:muesli:reflow:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/muesli/reflow@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:IFsN6K9NfGtjeggFP+68I4chLZV2yIKsXJFNZ+eWh6s=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/muesli/reflow@v0.3.0?package-id=8ce172e7de51ae13", + "type": "library", + "name": "github.com/muesli/reflow", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:muesli:reflow:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/muesli/reflow@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:IFsN6K9NfGtjeggFP+68I4chLZV2yIKsXJFNZ+eWh6s=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/oklog/run@v1.1.0?package-id=11f45d597027b527", + "type": "library", + "name": "github.com/oklog/run", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:oklog:run:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/oklog/run@v1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:GEenZ1cK0+q0+wsJew9qUg/DyD8k3JzYsZAi5gYi2mA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/oklog/run@v1.1.0?package-id=2df7f58655355482", + "type": "library", + "name": "github.com/oklog/run", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:oklog:run:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/oklog/run@v1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:GEenZ1cK0+q0+wsJew9qUg/DyD8k3JzYsZAi5gYi2mA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/oklog/run@v1.1.0?package-id=1f8528de7938e8de", + "type": "library", + "name": "github.com/oklog/run", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:oklog:run:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/oklog/run@v1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:GEenZ1cK0+q0+wsJew9qUg/DyD8k3JzYsZAi5gYi2mA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/oklog/run@v1.1.0?package-id=fbc4e8fd079bf973", + "type": "library", + "name": "github.com/oklog/run", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:oklog:run:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/oklog/run@v1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:GEenZ1cK0+q0+wsJew9qUg/DyD8k3JzYsZAi5gYi2mA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0?package-id=3634802719c473b6", + "type": "library", + "name": "github.com/opencontainers/go-digest", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/opencontainers/image-spec@v1.1.0-rc5?package-id=f9d87ab96bbf5f09", + "type": "library", + "name": "github.com/opencontainers/image-spec", + "version": "v1.1.0-rc5", + "cpe": "cpe:2.3:a:opencontainers:image-spec:v1.1.0-rc5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/opencontainers/image-spec@v1.1.0-rc5", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:opencontainers:image_spec:v1.1.0-rc5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Ygwkfw9bpDvs+c9E34SdgGOj41dX/cbdlwvlWt0pnFI=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/pkg/browser@v0.0.0-20210911075715-681adbf594b8?package-id=6320a655f8fa3a6e", + "type": "library", + "name": "github.com/pkg/browser", + "version": "v0.0.0-20210911075715-681adbf594b8", + "cpe": "cpe:2.3:a:pkg:browser:v0.0.0-20210911075715-681adbf594b8:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/pkg/browser@v0.0.0-20210911075715-681adbf594b8", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:KoWmjvw+nsYOo29YJK9vDA65RGE3NrOnUtO7a+RF9HU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/pkg/errors@v0.9.1?package-id=8e17fb994454d3dc", + "type": "library", + "name": "github.com/pkg/errors", + "version": "v0.9.1", + "cpe": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/pkg/errors@v0.9.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/prometheus/client_golang@v1.17.0?package-id=d1c4975ae4840eda", + "type": "library", + "name": "github.com/prometheus/client_golang", + "version": "v1.17.0", + "cpe": "cpe:2.3:a:prometheus:client-golang:v1.17.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/client_golang@v1.17.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prometheus:client_golang:v1.17.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:rl2sfwZMtSthVU752MqfjQozy7blglC+1SOtjMAMh+Q=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/prometheus/client_model@v0.5.0?package-id=766ebda083f3307f", + "type": "library", + "name": "github.com/prometheus/client_model", + "version": "v0.5.0", + "cpe": "cpe:2.3:a:prometheus:client-model:v0.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/client_model@v0.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prometheus:client_model:v0.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:VQw1hfvPvk3Uv6Qf29VrPF32JB6rtbgI6cYPYQjL0Qw=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/prometheus/common@v0.45.0?package-id=d52f33aa31123797", + "type": "library", + "name": "github.com/prometheus/common", + "version": "v0.45.0", + "cpe": "cpe:2.3:a:prometheus:common:v0.45.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/common@v0.45.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:2BGz0eBc2hdMDLnO/8n0jeB3oPrt2D08CekT0lneoxM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/prometheus/procfs@v0.12.0?package-id=9881fe5965a12d1a", + "type": "library", + "name": "github.com/prometheus/procfs", + "version": "v0.12.0", + "cpe": "cpe:2.3:a:prometheus:procfs:v0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/procfs@v0.12.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jluTpSng7V9hY0O2R9DzzJHYb2xULk9VTR1V1R/k6Bo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/rivo/uniseg@v0.4.4?package-id=00f2cbcd10e6a103", + "type": "library", + "name": "github.com/rivo/uniseg", + "version": "v0.4.4", + "cpe": "cpe:2.3:a:rivo:uniseg:v0.4.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rivo/uniseg@v0.4.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:8TfxU8dW6PdqD27gjM8MVNuicgxIjxpm4K7x4jp8sis=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/rivo/uniseg@v0.4.4?package-id=3e0ad65ed06cfbc7", + "type": "library", + "name": "github.com/rivo/uniseg", + "version": "v0.4.4", + "cpe": "cpe:2.3:a:rivo:uniseg:v0.4.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rivo/uniseg@v0.4.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:8TfxU8dW6PdqD27gjM8MVNuicgxIjxpm4K7x4jp8sis=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/rivo/uniseg@v0.4.4?package-id=d314b2241df4ffaa", + "type": "library", + "name": "github.com/rivo/uniseg", + "version": "v0.4.4", + "cpe": "cpe:2.3:a:rivo:uniseg:v0.4.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rivo/uniseg@v0.4.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:8TfxU8dW6PdqD27gjM8MVNuicgxIjxpm4K7x4jp8sis=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/rivo/uniseg@v0.4.4?package-id=e7dbbccb2ef0d6cb", + "type": "library", + "name": "github.com/rivo/uniseg", + "version": "v0.4.4", + "cpe": "cpe:2.3:a:rivo:uniseg:v0.4.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rivo/uniseg@v0.4.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:8TfxU8dW6PdqD27gjM8MVNuicgxIjxpm4K7x4jp8sis=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/rs/cors@v1.10.1?package-id=5217f781fdfebf03", + "type": "library", + "name": "github.com/rs/cors", + "version": "v1.10.1", + "cpe": "cpe:2.3:a:rs:cors:v1.10.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rs/cors@v1.10.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:L0uuZVXIKlI1SShY2nhFfo44TYvDPQ1w4oFkUJNfhyo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/rs/zerolog@v1.30.0?package-id=7bc215d30de7ca64", + "type": "library", + "name": "github.com/rs/zerolog", + "version": "v1.30.0", + "cpe": "cpe:2.3:a:rs:zerolog:v1.30.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rs/zerolog@v1.30.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:SymVODrcRsaRaSInD9yQtKbtWqwsfoPcRff/oRXLj4c=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/ryanuber/go-glob@v1.0.0?package-id=9fcf4dd457193f5f", + "type": "library", + "name": "github.com/ryanuber/go-glob", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:ryanuber:go-glob:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/ryanuber/go-glob@v1.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ryanuber:go_glob:v1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:iQh3xXAumdQ+4Ufa5b25cRpC5TYKlno6hsv6Cb3pkBk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1?package-id=30bae7799a0df73c", + "type": "library", + "name": "github.com/santhosh-tekuri/jsonschema/v5", + "version": "v5.3.1", + "cpe": "cpe:2.3:a:santhosh-tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:santhosh_tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:santhosh:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lZUw3E0/J3roVtGQ+SCrUrg3ON6NgVqpn3+iol9aGu4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1?package-id=cb4b622763a93227", + "type": "library", + "name": "github.com/santhosh-tekuri/jsonschema/v5", + "version": "v5.3.1", + "cpe": "cpe:2.3:a:santhosh-tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:santhosh_tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:santhosh:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lZUw3E0/J3roVtGQ+SCrUrg3ON6NgVqpn3+iol9aGu4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1?package-id=14d1003496935c58", + "type": "library", + "name": "github.com/santhosh-tekuri/jsonschema/v5", + "version": "v5.3.1", + "cpe": "cpe:2.3:a:santhosh-tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:santhosh_tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:santhosh:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lZUw3E0/J3roVtGQ+SCrUrg3ON6NgVqpn3+iol9aGu4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1?package-id=61b4d7d1bd7596fa", + "type": "library", + "name": "github.com/santhosh-tekuri/jsonschema/v5", + "version": "v5.3.1", + "cpe": "cpe:2.3:a:santhosh-tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:santhosh_tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:santhosh:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lZUw3E0/J3roVtGQ+SCrUrg3ON6NgVqpn3+iol9aGu4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.7.0?package-id=e30dbbfe2f7d9127", + "type": "library", + "name": "github.com/secure-systems-lab/go-securesystemslib", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:OwvJ5jQf9LnIAS83waAjPbcMsODrTQUpJ02eNLUoxBg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.7.0?package-id=5d28c4f8b5874a37", + "type": "library", + "name": "github.com/secure-systems-lab/go-securesystemslib", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:OwvJ5jQf9LnIAS83waAjPbcMsODrTQUpJ02eNLUoxBg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.7.0?package-id=65440a4d463ed747", + "type": "library", + "name": "github.com/secure-systems-lab/go-securesystemslib", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:OwvJ5jQf9LnIAS83waAjPbcMsODrTQUpJ02eNLUoxBg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.7.0?package-id=44fefa4f798e3ff4", + "type": "library", + "name": "github.com/secure-systems-lab/go-securesystemslib", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:OwvJ5jQf9LnIAS83waAjPbcMsODrTQUpJ02eNLUoxBg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/sirupsen/logrus@v1.9.3?package-id=9c4fe3bb3eaed94e", + "type": "library", + "name": "github.com/sirupsen/logrus", + "version": "v1.9.3", + "cpe": "cpe:2.3:a:sirupsen:logrus:v1.9.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/sirupsen/logrus@v1.9.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5?package-id=4f9707df23791c49", + "type": "library", + "name": "github.com/spf13/pflag", + "version": "v1.0.5", + "cpe": "cpe:2.3:a:spf13:pflag:v1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/vbatts/tar-split@v0.11.5?package-id=abcbe5bc10958418", + "type": "library", + "name": "github.com/vbatts/tar-split", + "version": "v0.11.5", + "cpe": "cpe:2.3:a:vbatts:tar-split:v0.11.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/vbatts/tar-split@v0.11.5", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:vbatts:tar_split:v0.11.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:3bHCTIheBm1qFTcgh9oPu+nNBtX+XJIupG/vacinCts=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/zclconf/go-cty@v1.13.3?package-id=ab2fcaf4c7f05613", + "type": "library", + "name": "github.com/zclconf/go-cty", + "version": "v1.13.3", + "cpe": "cpe:2.3:a:zclconf:go-cty:v1.13.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/zclconf/go-cty@v1.13.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:zclconf:go_cty:v1.13.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:m+b9q3YDbg6Bec5rr+KGy1MzEVzY/jC2X+YX4yqKtHI=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.opencensus.io@v0.24.0?package-id=5798e580b022a379", + "type": "library", + "name": "go.opencensus.io", + "version": "v0.24.0", + "purl": "pkg:golang/go.opencensus.io@v0.24.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:y73uSU6J157QMP2kn2r30vwW1A2W2WFwSCGnAVxeaD0=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.uber.org/multierr@v1.11.0?package-id=49e3592a5d3bc0f1", + "type": "library", + "name": "go.uber.org/multierr", + "version": "v1.11.0", + "purl": "pkg:golang/go.uber.org/multierr@v1.11.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.uber.org/multierr@v1.11.0?package-id=e020f537f4dc3ac4", + "type": "library", + "name": "go.uber.org/multierr", + "version": "v1.11.0", + "purl": "pkg:golang/go.uber.org/multierr@v1.11.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.uber.org/multierr@v1.11.0?package-id=8da9eaf215c73644", + "type": "library", + "name": "go.uber.org/multierr", + "version": "v1.11.0", + "purl": "pkg:golang/go.uber.org/multierr@v1.11.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.uber.org/multierr@v1.11.0?package-id=c19498a793ff3d15", + "type": "library", + "name": "go.uber.org/multierr", + "version": "v1.11.0", + "purl": "pkg:golang/go.uber.org/multierr@v1.11.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.uber.org/zap@v1.26.0?package-id=1a7b797e3383faba", + "type": "library", + "name": "go.uber.org/zap", + "version": "v1.26.0", + "purl": "pkg:golang/go.uber.org/zap@v1.26.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:sI7k6L95XOKS281NhVKOFCUNIvv9e0w4BF8N3u+tCRo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.uber.org/zap@v1.26.0?package-id=437fd35517164d16", + "type": "library", + "name": "go.uber.org/zap", + "version": "v1.26.0", + "purl": "pkg:golang/go.uber.org/zap@v1.26.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:sI7k6L95XOKS281NhVKOFCUNIvv9e0w4BF8N3u+tCRo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.uber.org/zap@v1.26.0?package-id=5eafed4baa2ffaf8", + "type": "library", + "name": "go.uber.org/zap", + "version": "v1.26.0", + "purl": "pkg:golang/go.uber.org/zap@v1.26.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:sI7k6L95XOKS281NhVKOFCUNIvv9e0w4BF8N3u+tCRo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.uber.org/zap@v1.26.0?package-id=e488752e056f3f8a", + "type": "library", + "name": "go.uber.org/zap", + "version": "v1.26.0", + "purl": "pkg:golang/go.uber.org/zap@v1.26.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:sI7k6L95XOKS281NhVKOFCUNIvv9e0w4BF8N3u+tCRo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/crypto@v0.14.0?package-id=eda7f8e4c9dba26f", + "type": "library", + "name": "golang.org/x/crypto", + "version": "v0.14.0", + "cpe": "cpe:2.3:a:golang:x\\/crypto:v0.14.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/crypto@v0.14.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:wBqGXzWJW6m1XrIKlAH0Hs1JJ7+9KBwnIO8v66Q9cHc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/crypto@v0.14.0?package-id=4361fc5a46c5738f", + "type": "library", + "name": "golang.org/x/crypto", + "version": "v0.14.0", + "cpe": "cpe:2.3:a:golang:x\\/crypto:v0.14.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/crypto@v0.14.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:wBqGXzWJW6m1XrIKlAH0Hs1JJ7+9KBwnIO8v66Q9cHc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/crypto@v0.14.0?package-id=e231641edf9a9442", + "type": "library", + "name": "golang.org/x/crypto", + "version": "v0.14.0", + "cpe": "cpe:2.3:a:golang:x\\/crypto:v0.14.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/crypto@v0.14.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:wBqGXzWJW6m1XrIKlAH0Hs1JJ7+9KBwnIO8v66Q9cHc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/crypto@v0.14.0?package-id=b108fd094187b044", + "type": "library", + "name": "golang.org/x/crypto", + "version": "v0.14.0", + "cpe": "cpe:2.3:a:golang:x\\/crypto:v0.14.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/crypto@v0.14.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:wBqGXzWJW6m1XrIKlAH0Hs1JJ7+9KBwnIO8v66Q9cHc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/mod@v0.13.0?package-id=66a7289e1e9e3d67", + "type": "library", + "name": "golang.org/x/mod", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/mod:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/mod@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:I/DsJXRlw/8l/0c24sM9yb0T4z9liZTduXvdAWYiysY=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/net@v0.17.0?package-id=171005028177564e", + "type": "library", + "name": "golang.org/x/net", + "version": "v0.17.0", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.17.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.17.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:pVaXccu2ozPjCXewfr1S7xza/zcXTity9cCdXQYSjIM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/net@v0.17.0?package-id=cf640dc590e7e5a2", + "type": "library", + "name": "golang.org/x/net", + "version": "v0.17.0", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.17.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.17.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:pVaXccu2ozPjCXewfr1S7xza/zcXTity9cCdXQYSjIM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/net@v0.17.0?package-id=04b51e3f43166573", + "type": "library", + "name": "golang.org/x/net", + "version": "v0.17.0", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.17.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.17.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:pVaXccu2ozPjCXewfr1S7xza/zcXTity9cCdXQYSjIM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/net@v0.17.0?package-id=3a37828483df8615", + "type": "library", + "name": "golang.org/x/net", + "version": "v0.17.0", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.17.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.17.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:pVaXccu2ozPjCXewfr1S7xza/zcXTity9cCdXQYSjIM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.13.0?package-id=86f3ddbf7ee8622e", + "type": "library", + "name": "golang.org/x/oauth2", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/oauth2:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/oauth2@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jDDenyj+WgFtmV3zYVoi8aE2BwtXFLWOA67ZfNWftiY=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/sync@v0.5.0?package-id=32d4132673364628", + "type": "library", + "name": "golang.org/x/sync", + "version": "v0.5.0", + "cpe": "cpe:2.3:a:golang:x\\/sync:v0.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sync@v0.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:60k92dhOjHxJkrqnwsfl8KuaHbn/5dl0lUPUklKo3qE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/sys@v0.13.0?package-id=a53b10e2f2724d6d", + "type": "library", + "name": "golang.org/x/sys", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Af8nKPmuFypiUBjVoU9V20FiaFXOcuZI21p0ycVYYGE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/sys@v0.13.0?package-id=db43822e2bdf85fb", + "type": "library", + "name": "golang.org/x/sys", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Af8nKPmuFypiUBjVoU9V20FiaFXOcuZI21p0ycVYYGE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/sys@v0.13.0?package-id=47c93b727a329cc0", + "type": "library", + "name": "golang.org/x/sys", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Af8nKPmuFypiUBjVoU9V20FiaFXOcuZI21p0ycVYYGE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/sys@v0.13.0?package-id=15b64f4a9432e8a6", + "type": "library", + "name": "golang.org/x/sys", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Af8nKPmuFypiUBjVoU9V20FiaFXOcuZI21p0ycVYYGE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/text@v0.13.0?package-id=b599bd7087c92e04", + "type": "library", + "name": "golang.org/x/text", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ablQoSUd0tRdKxZewP80B+BaqeKJuVhuRxj/dkrun3k=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/text@v0.13.0?package-id=98b08157ba73ad18", + "type": "library", + "name": "golang.org/x/text", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ablQoSUd0tRdKxZewP80B+BaqeKJuVhuRxj/dkrun3k=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/text@v0.13.0?package-id=5f03397435c9015a", + "type": "library", + "name": "golang.org/x/text", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ablQoSUd0tRdKxZewP80B+BaqeKJuVhuRxj/dkrun3k=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/text@v0.13.0?package-id=5daf43149ec121a7", + "type": "library", + "name": "golang.org/x/text", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ablQoSUd0tRdKxZewP80B+BaqeKJuVhuRxj/dkrun3k=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/time@v0.3.0?package-id=a7cb354e638de0fb", + "type": "library", + "name": "golang.org/x/time", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:golang:x\\/time:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/time@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:rg5rLMjNzMS1RkNLzCG38eapWhnYLFYXDXj2gOlr8j4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/tools@v0.14.0?package-id=572080ba44e11ba2", + "type": "library", + "name": "golang.org/x/tools", + "version": "v0.14.0", + "cpe": "cpe:2.3:a:golang:x\\/tools:v0.14.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/tools@v0.14.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jvNa2pY0M4r62jkRQ6RwEZZyPcymeL9XZMLBbV7U2nc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/xerrors@v0.0.0-20231012003039-104605ab7028?package-id=04bc4e4a2cc1065c", + "type": "library", + "name": "golang.org/x/xerrors", + "version": "v0.0.0-20231012003039-104605ab7028", + "cpe": "cpe:2.3:a:golang:x\\/xerrors:v0.0.0-20231012003039-104605ab7028:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/xerrors@v0.0.0-20231012003039-104605ab7028", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:+cNy6SZtPcJQH3LJVLOSmiC7MMxXNOb3PU/VUEz+EhU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/api@v0.149.0?package-id=07557fdfa606862a", + "type": "library", + "name": "google.golang.org/api", + "version": "v0.149.0", + "cpe": "cpe:2.3:a:google:api:v0.149.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/api@v0.149.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:b2CqT6kG+zqJIVKRQ3ELJVLN1PwHZ6DJ3dW8yl82rgY=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20231016165738-49dd2c1f3d0b?package-id=60dacb54ec4698dc", + "type": "library", + "name": "google.golang.org/genproto", + "version": "v0.0.0-20231016165738-49dd2c1f3d0b", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20231016165738-49dd2c1f3d0b:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20231016165738-49dd2c1f3d0b", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:+YaDE2r2OG8t/z5qmsh7Y+XXwCbvadxxZ0YY6mTdrVA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20231016165738-49dd2c1f3d0b?package-id=d8c733147b2d1a37", + "type": "library", + "name": "google.golang.org/genproto/googleapis/api", + "version": "v0.0.0-20231016165738-49dd2c1f3d0b", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20231016165738-49dd2c1f3d0b:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20231016165738-49dd2c1f3d0b", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:CIC2YMXmIhYw6evmhPxBKJ4fmLbOFtXQN/GV3XOZR8k=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/bytestream@v0.0.0-20231030173426-d783a09b4405?package-id=e08289c2d4e69d7c", + "type": "library", + "name": "google.golang.org/genproto/googleapis/bytestream", + "version": "v0.0.0-20231030173426-d783a09b4405", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20231030173426-d783a09b4405:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto/googleapis/bytestream@v0.0.0-20231030173426-d783a09b4405", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:o4S3HvTUEXgRsNSUQsALDVog0O9F/U1JJlHmmUN8Uas=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20231016165738-49dd2c1f3d0b?package-id=d3cd4f22bc426a63", + "type": "library", + "name": "google.golang.org/genproto/googleapis/rpc", + "version": "v0.0.0-20231016165738-49dd2c1f3d0b", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20231016165738-49dd2c1f3d0b:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20231016165738-49dd2c1f3d0b", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ZlWIi1wSK56/8hn4QcBp/j9M7Gt3U/3hZw3mC7vDICo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20231016165738-49dd2c1f3d0b?package-id=ab6a123f70ceff88", + "type": "library", + "name": "google.golang.org/genproto/googleapis/rpc", + "version": "v0.0.0-20231016165738-49dd2c1f3d0b", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20231016165738-49dd2c1f3d0b:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20231016165738-49dd2c1f3d0b", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ZlWIi1wSK56/8hn4QcBp/j9M7Gt3U/3hZw3mC7vDICo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20231016165738-49dd2c1f3d0b?package-id=ce37abf42415ebd3", + "type": "library", + "name": "google.golang.org/genproto/googleapis/rpc", + "version": "v0.0.0-20231016165738-49dd2c1f3d0b", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20231016165738-49dd2c1f3d0b:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20231016165738-49dd2c1f3d0b", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ZlWIi1wSK56/8hn4QcBp/j9M7Gt3U/3hZw3mC7vDICo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20231016165738-49dd2c1f3d0b?package-id=1508b4bc828958c2", + "type": "library", + "name": "google.golang.org/genproto/googleapis/rpc", + "version": "v0.0.0-20231016165738-49dd2c1f3d0b", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20231016165738-49dd2c1f3d0b:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20231016165738-49dd2c1f3d0b", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ZlWIi1wSK56/8hn4QcBp/j9M7Gt3U/3hZw3mC7vDICo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.59.0?package-id=66d1dc82e849fab3", + "type": "library", + "name": "google.golang.org/grpc", + "version": "v1.59.0", + "cpe": "cpe:2.3:a:google:grpc:v1.59.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.59.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Z5Iec2pjwb+LEOqzpB2MR12/eKFhDPhuqW91O+4bwUk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.59.0?package-id=4113ce1001bab618", + "type": "library", + "name": "google.golang.org/grpc", + "version": "v1.59.0", + "cpe": "cpe:2.3:a:google:grpc:v1.59.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.59.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Z5Iec2pjwb+LEOqzpB2MR12/eKFhDPhuqW91O+4bwUk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.59.0?package-id=c029f81c541558cf", + "type": "library", + "name": "google.golang.org/grpc", + "version": "v1.59.0", + "cpe": "cpe:2.3:a:google:grpc:v1.59.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.59.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Z5Iec2pjwb+LEOqzpB2MR12/eKFhDPhuqW91O+4bwUk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.59.0?package-id=b61af932b9ee28dd", + "type": "library", + "name": "google.golang.org/grpc", + "version": "v1.59.0", + "cpe": "cpe:2.3:a:google:grpc:v1.59.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.59.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Z5Iec2pjwb+LEOqzpB2MR12/eKFhDPhuqW91O+4bwUk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.31.0?package-id=98c95115a554da07", + "type": "library", + "name": "google.golang.org/protobuf", + "version": "v1.31.0", + "cpe": "cpe:2.3:a:google:protobuf:v1.31.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/protobuf@v1.31.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:g0LDEJHgrBl9N9r17Ru3sqWhkIx2NB67okBHPwC7hs8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.31.0?package-id=0e5c9df0cfb2c0d2", + "type": "library", + "name": "google.golang.org/protobuf", + "version": "v1.31.0", + "cpe": "cpe:2.3:a:google:protobuf:v1.31.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/protobuf@v1.31.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:g0LDEJHgrBl9N9r17Ru3sqWhkIx2NB67okBHPwC7hs8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.31.0?package-id=4d2d028fa2cfaa47", + "type": "library", + "name": "google.golang.org/protobuf", + "version": "v1.31.0", + "cpe": "cpe:2.3:a:google:protobuf:v1.31.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/protobuf@v1.31.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:g0LDEJHgrBl9N9r17Ru3sqWhkIx2NB67okBHPwC7hs8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.31.0?package-id=de77881b6c7a5ad3", + "type": "library", + "name": "google.golang.org/protobuf", + "version": "v1.31.0", + "cpe": "cpe:2.3:a:google:protobuf:v1.31.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/protobuf@v1.31.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:g0LDEJHgrBl9N9r17Ru3sqWhkIx2NB67okBHPwC7hs8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=a46b225bc9db9187", + "type": "library", + "name": "gopkg.in/yaml.v3", + "version": "v3.0.1", + "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.28.3?package-id=847f5e32f9b99920", + "type": "library", + "name": "k8s.io/apimachinery", + "version": "v0.28.3", + "purl": "pkg:golang/k8s.io/apimachinery@v0.28.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:B1wYx8txOaCQG0HmYF6nbpU8dg6HvA06x5tEffvOe7A=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20230726121419-3b25d923346b?package-id=ae6dae8bcca124d7", + "type": "library", + "name": "k8s.io/utils", + "version": "v0.0.0-20230726121419-3b25d923346b", + "purl": "pkg:golang/k8s.io/utils@v0.0.0-20230726121419-3b25d923346b", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:sgn3ZU783SCgtaSJjpcVVlRqd6GSnlTLKgpAAttJvpI=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/nhooyr.io/websocket@v1.8.7?package-id=433528d83fddd41d", + "type": "library", + "name": "nhooyr.io/websocket", + "version": "v1.8.7", + "purl": "pkg:golang/nhooyr.io/websocket@v1.8.7", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:usjR2uOr/zjjkVMy0lW+PPohFok7PCow5sDjLgX4P4g=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/stdlib@1.21.5?package-id=a17c60dc0f72aadc", + "type": "library", + "name": "stdlib", + "version": "go1.21.5", + "licenses": [{ "license": { "id": "BSD-3-Clause" } }], + "cpe": "cpe:2.3:a:golang:go:1.21.5:-:*:*:*:*:*:*", + "purl": "pkg:golang/stdlib@1.21.5", + "properties": [ + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" } + ] + }, + { + "bom-ref": "pkg:golang/stdlib@1.21.5?package-id=ecd2105513157ff0", + "type": "library", + "name": "stdlib", + "version": "go1.21.5", + "licenses": [{ "license": { "id": "BSD-3-Clause" } }], + "cpe": "cpe:2.3:a:golang:go:1.21.5:-:*:*:*:*:*:*", + "purl": "pkg:golang/stdlib@1.21.5", + "properties": [ + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" } + ] + }, + { + "bom-ref": "pkg:golang/stdlib@1.21.5?package-id=1847545f699d9f52", + "type": "library", + "name": "stdlib", + "version": "go1.21.5", + "licenses": [{ "license": { "id": "BSD-3-Clause" } }], + "cpe": "cpe:2.3:a:golang:go:1.21.5:-:*:*:*:*:*:*", + "purl": "pkg:golang/stdlib@1.21.5", + "properties": [ + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" } + ] + }, + { + "bom-ref": "pkg:golang/stdlib@1.21.5?package-id=f3fe83501937440f", + "type": "library", + "name": "stdlib", + "version": "go1.21.5", + "licenses": [{ "license": { "id": "BSD-3-Clause" } }], + "cpe": "cpe:2.3:a:golang:go:1.21.5:-:*:*:*:*:*:*", + "purl": "pkg:golang/stdlib@1.21.5", + "properties": [ + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" } + ] + } + ] +} diff --git a/pkg/attestation/crafter/materials/testdata/sbom.cyclonedx-1.5-null-cwes.json b/pkg/attestation/crafter/materials/testdata/sbom.cyclonedx-1.5-null-cwes.json new file mode 100644 index 000000000..5c6395140 --- /dev/null +++ b/pkg/attestation/crafter/materials/testdata/sbom.cyclonedx-1.5-null-cwes.json @@ -0,0 +1,9885 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.5", + "serialNumber": "urn:uuid:fb656b68-ebe4-42a9-bd76-ac382b0e6752", + "version": 1, + "metadata": { + "timestamp": "2024-01-27T22:30:07+01:00", + "tools": { + "components": [ + { + "type": "application", + "author": "anchore", + "name": "syft", + "version": "0.101.1" + } + ] + }, + "component": { + "bom-ref": "d5a681ad9af7217d", + "type": "container", + "name": "ghcr.io/chainloop-dev/chainloop/control-plane", + "version": "v0.55.0" + } + }, + "components": [ + { + "bom-ref": "pkg:golang/ariga.io/atlas@v0.13.3?package-id=b414da9862878694", + "type": "library", + "name": "ariga.io/atlas", + "version": "v0.13.3", + "purl": "pkg:golang/ariga.io/atlas@v0.13.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:L6Zz/0/yo86flQclZwIqJEKrHoJxQOkj3Z2JPvzZEHE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/cloud.google.com/go@v0.110.9?package-id=f1b15d44b80e8c02", + "type": "library", + "name": "cloud.google.com/go", + "version": "v0.110.9", + "purl": "pkg:golang/cloud.google.com/go@v0.110.9", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:e7ITSqGFFk4rbz/JFIqZh3G4VEHguhAL4BQcFlWtU68=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/cloud.google.com/go/compute/metadata@v0.2.3?package-id=f59e99a33aefe15e", + "type": "library", + "name": "cloud.google.com/go/compute/metadata", + "version": "v0.2.3", + "cpe": "cpe:2.3:a:go:compute\\/metadata:v0.2.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/cloud.google.com/go/compute/metadata@v0.2.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:mg4jlk7mCAj6xXp9UJ4fjI9VUI5rubuGBW5aJ7UnBMY=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/cloud.google.com/go/iam@v1.1.4?package-id=e60f021b78ad279b", + "type": "library", + "name": "cloud.google.com/go/iam", + "version": "v1.1.4", + "cpe": "cpe:2.3:a:go:iam:v1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/cloud.google.com/go/iam@v1.1.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:K6n/GZHFTtEoKT5aUG3l9diPi0VduZNQ1PfdnpkkIFk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/cloud.google.com/go/secretmanager@v1.11.2?package-id=581613de2374e3ed", + "type": "library", + "name": "cloud.google.com/go/secretmanager", + "version": "v1.11.2", + "cpe": "cpe:2.3:a:go:secretmanager:v1.11.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/cloud.google.com/go/secretmanager@v1.11.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:52Z78hH8NBWIqbvIG0wi0EoTaAmSx99KIOAmDXIlX0M=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/cloud.google.com/go/storage@v1.33.0?package-id=802630e9fab2edb3", + "type": "library", + "name": "cloud.google.com/go/storage", + "version": "v1.33.0", + "cpe": "cpe:2.3:a:go:storage:v1.33.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/cloud.google.com/go/storage@v1.33.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:PVrDOkIC8qQVa1P3SXGpQvfuJhN2LHOoyZvWs8D2X5M=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/code.cloudfoundry.org/bytefmt@v0.0.0-20230612151507-41ef4d1f67a4?package-id=b648a64660a16dbf", + "type": "library", + "name": "code.cloudfoundry.org/bytefmt", + "version": "v0.0.0-20230612151507-41ef4d1f67a4", + "purl": "pkg:golang/code.cloudfoundry.org/bytefmt@v0.0.0-20230612151507-41ef4d1f67a4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:9G5F8zgma5v0GdDvNz6iZwwJp3RS/z0SY/aHGfVwvTo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/entgo.io/ent@v0.12.3?package-id=731ef001f91324c5", + "type": "library", + "name": "entgo.io/ent", + "version": "v0.12.3", + "purl": "pkg:golang/entgo.io/ent@v0.12.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:N5lO2EOrHpCH5HYfiMOCHYbo+oh5M8GjT0/cx5x6xkk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.8.0?package-id=beb3d4bf5c25dbb6", + "type": "library", + "name": "github.com/Azure/azure-sdk-for-go/sdk/azcore", + "version": "v1.8.0", + "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/azcore:v1.8.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azcore@v1.8.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/azcore:v1.8.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:9kDVnTz3vbfweTqAUmk/a/pH5pWFCHtvRpHYC0G/dcA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azidentity@v1.4.0?package-id=09127dcba1cb1e06", + "type": "library", + "name": "github.com/Azure/azure-sdk-for-go/sdk/azidentity", + "version": "v1.4.0", + "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/azidentity:v1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/azidentity:v1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:BMAjVKJM0U/CYF27gA0ZMmXGkOcvfFtD0oHVZ1TIPRI=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.4.0?package-id=65920e48a72c24c0", + "type": "library", + "name": "github.com/Azure/azure-sdk-for-go/sdk/internal", + "version": "v1.4.0", + "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/internal:v1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/internal@v1.4.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/internal:v1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:TuEMD+E+1aTjjLICGQOW6vLe8UWES7kopac9mUXL56Y=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/keyvault/azsecrets@v0.12.0?package-id=18d7aa4be0e2bf4f", + "type": "library", + "name": "github.com/Azure/azure-sdk-for-go/sdk/keyvault/azsecrets", + "version": "v0.12.0", + "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/keyvault\\/azsecrets:v0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/keyvault/azsecrets@v0.12.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/keyvault\\/azsecrets:v0.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:xnO4sFyG8UH2fElBkcqLTOZsAajvKfnSlgBBW8dXYjw=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/keyvault/internal@v0.7.1?package-id=462d93d2a7eab7a3", + "type": "library", + "name": "github.com/Azure/azure-sdk-for-go/sdk/keyvault/internal", + "version": "v0.7.1", + "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/keyvault\\/internal:v0.7.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/keyvault/internal@v0.7.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/keyvault\\/internal:v0.7.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:FbH3BbSb4bvGluTesZZ+ttN/MDsnMmQP36OSnDuSXqw=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/storage/azblob@v1.1.0?package-id=9af35c560b176ff1", + "type": "library", + "name": "github.com/Azure/azure-sdk-for-go/sdk/storage/azblob", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/storage\\/azblob:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob@v1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/storage\\/azblob:v1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:nVocQV40OQne5613EeLayJiRAJuKlBGy+m22qWG+WRg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/azuread/microsoft-authentication-library-for-go@v1.2.0?package-id=b09096b981626896", + "type": "library", + "name": "github.com/AzureAD/microsoft-authentication-library-for-go", + "version": "v1.2.0", + "cpe": "cpe:2.3:a:AzureAD:microsoft-authentication-library-for-go:v1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/AzureAD/microsoft-authentication-library-for-go@v1.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:AzureAD:microsoft_authentication_library_for_go:v1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:hVeq+yCyUi+MsoO/CU95yqCIcdzra5ovzk8Q2BBpV2M=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/agext/levenshtein@v1.2.3?package-id=351e9e8ae46f4d59", + "type": "library", + "name": "github.com/agext/levenshtein", + "version": "v1.2.3", + "cpe": "cpe:2.3:a:agext:levenshtein:v1.2.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/agext/levenshtein@v1.2.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:YB2fHEn0UJagG8T1rrWknE3ZQzWM06O8AMAatNn7lmo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/apparentlymart/go-textseg/v13@v13.0.0?package-id=f81479e62ecc939c", + "type": "library", + "name": "github.com/apparentlymart/go-textseg/v13", + "version": "v13.0.0", + "cpe": "cpe:2.3:a:apparentlymart:go-textseg\\/v13:v13.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/apparentlymart/go-textseg/v13@v13.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:apparentlymart:go_textseg\\/v13:v13.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Y+KvPE1NYz0xl601PVImeQfFyEy6iT90AvPUL1NNfNw=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go@v1.47.0?package-id=d1865182c8f4c818", + "type": "library", + "name": "github.com/aws/aws-sdk-go", + "version": "v1.47.0", + "cpe": "cpe:2.3:a:aws:aws-sdk-go:v1.47.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go@v1.47.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go:v1.47.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:/JUg9V1+xh+qBn8A6ec/l15ETPaMaBqxkjz+gg63dNk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.21.2?package-id=52cbf77ae1c766a1", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2", + "version": "v1.21.2", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2:v1.21.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.21.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2:v1.21.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:+LXZ0sgo8quN9UOKXXzAWRT3FWd4NxeXWOZom9pE7GA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.19.1?package-id=8d6adfa7465f43b0", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/config", + "version": "v1.19.1", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/config:v1.19.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.19.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/config:v1.19.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:oe3vqcGftyk40icfLymhhhNysAwk0NfiwkDi2GTPMXs=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.13.43?package-id=0d6ff47d52f4974c", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/credentials", + "version": "v1.13.43", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/credentials:v1.13.43:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.13.43", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/credentials:v1.13.43:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:LU8vo40zBlo3R7bAvBVy/ku4nxGEyZe9N8MqAeFTzF8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.13.13?package-id=6254035ab4aa5858", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds", + "version": "v1.13.13", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/feature\\/ec2\\/imds:v1.13.13:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.13.13", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/feature\\/ec2\\/imds:v1.13.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:PIktER+hwIG286DqXyvVENjgLTAwGgoeriLDD5C+YlQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.1.43?package-id=8b902afc3f9e4a2b", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/internal/configsources", + "version": "v1.1.43", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/configsources:v1.1.43:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.1.43", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/configsources:v1.1.43:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:nFBQlGtkbPzp/NjZLuFxRqmT91rLJkgvsEQs68h962Y=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.4.37?package-id=8c8da101453c77d5", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2", + "version": "v2.4.37", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/endpoints\\/v2:v2.4.37:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.4.37", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/endpoints\\/v2:v2.4.37:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:JRVhO25+r3ar2mKGP7E0LDl8K9/G36gjlqca5iQbaqc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/ini@v1.3.45?package-id=59fe0f29ee75ed85", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/internal/ini", + "version": "v1.3.45", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/ini:v1.3.45:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/ini@v1.3.45", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/ini:v1.3.45:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:hze8YsjSh8Wl1rYa1CJpRmXP21BvOBuc76YhW0HsuQ4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.9.37?package-id=1972d8eedb279e71", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url", + "version": "v1.9.37", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/presigned-url:v1.9.37:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.9.37", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/presigned_url:v1.9.37:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:WWZA/I2K4ptBS1kg0kV1JbBtG/umed0vwHRrmcr9z7k=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/secretsmanager@v1.21.3?package-id=ee882e1ce7417f1e", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/service/secretsmanager", + "version": "v1.21.3", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/secretsmanager:v1.21.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/secretsmanager@v1.21.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/secretsmanager:v1.21.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:H6ZipEknzu7RkJW3w2PP75zd8XOdR35AEY5D57YrJtA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.15.2?package-id=18c033191679d9af", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/service/sso", + "version": "v1.15.2", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sso:v1.15.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.15.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sso:v1.15.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:JuPGc7IkOP4AaqcZSIcyqLpFSqBWK32rM9+a1g6u73k=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.17.3?package-id=cc3c13a86464dc63", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc", + "version": "v1.17.3", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ssooidc:v1.17.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.17.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ssooidc:v1.17.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:HFiiRkf1SdaAmV3/BHOFZ9DjFynPHj8G/UIO1lQS+fk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.23.2?package-id=6bb2deffbee3aff2", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/service/sts", + "version": "v1.23.2", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sts:v1.23.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.23.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sts:v1.23.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:0BkLfgeDjfZnZ+MhB3ONb01u9pwFYTCZVhlsSSBvlbU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/smithy-go@v1.15.0?package-id=a1100dd62eb906f0", + "type": "library", + "name": "github.com/aws/smithy-go", + "version": "v1.15.0", + "cpe": "cpe:2.3:a:aws:smithy-go:v1.15.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/smithy-go@v1.15.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:smithy_go:v1.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:PS/durmlzvAFpQHDs4wi4sNNP9ExsqZh6IlfdHXgKK8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/beorn7/perks@v1.0.1?package-id=327be739604254dd", + "type": "library", + "name": "github.com/beorn7/perks", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/beorn7/perks@v1.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/cenkalti/backoff/v3@v3.2.2?package-id=93b712f8cc226f1f", + "type": "library", + "name": "github.com/cenkalti/backoff/v3", + "version": "v3.2.2", + "cpe": "cpe:2.3:a:cenkalti:backoff\\/v3:v3.2.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cenkalti/backoff/v3@v3.2.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:cfUAAO3yvKMYKPrvhDuHSwQnhZNk/RMHKdZqKTxfm6M=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/cenkalti/backoff/v4@v4.2.1?package-id=b165e48d3d9dfc49", + "type": "library", + "name": "github.com/cenkalti/backoff/v4", + "version": "v4.2.1", + "cpe": "cpe:2.3:a:cenkalti:backoff\\/v4:v4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cenkalti/backoff/v4@v4.2.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:y4OZtCnogmCPw98Zjyt5a6+QwPLGkiQsYW5oUqylYbM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/cespare/xxhash/v2@v2.2.0?package-id=654db79c2d438302", + "type": "library", + "name": "github.com/cespare/xxhash/v2", + "version": "v2.2.0", + "cpe": "cpe:2.3:a:cespare:xxhash\\/v2:v2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:DC2CZ1Ep5Y4k3ZQ899DldepgrayRUGE6BBZ/cd9Cj44=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/chainloop-dev/chainloop@v0.0.0-20231218210522-9bb03950e7fd?package-id=ec2f46e6ca039cc1", + "type": "library", + "name": "github.com/chainloop-dev/chainloop", + "version": "v0.0.0-20231218210522-9bb03950e7fd", + "cpe": "cpe:2.3:a:chainloop-dev:chainloop:v0.0.0-20231218210522-9bb03950e7fd:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/chainloop-dev/chainloop@v0.0.0-20231218210522-9bb03950e7fd", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:chainloop_dev:chainloop:v0.0.0-20231218210522-9bb03950e7fd:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:chainloop:chainloop:v0.0.0-20231218210522-9bb03950e7fd:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goBuildSettings:-buildmode", "value": "exe" }, + { "name": "syft:metadata:goBuildSettings:-compiler", "value": "gc" }, + { "name": "syft:metadata:goBuildSettings:-ldflags", "value": "-s -w" }, + { "name": "syft:metadata:goBuildSettings:CGO_ENABLED", "value": "0" }, + { "name": "syft:metadata:goBuildSettings:GOAMD64", "value": "v1" }, + { "name": "syft:metadata:goBuildSettings:GOARCH", "value": "amd64" }, + { "name": "syft:metadata:goBuildSettings:GOOS", "value": "linux" }, + { "name": "syft:metadata:goBuildSettings:vcs", "value": "git" }, + { + "name": "syft:metadata:goBuildSettings:vcs.modified", + "value": "false" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.revision", + "value": "9bb03950e7fd03a573c87188aee4b9a1ff62cfcf" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.time", + "value": "2023-12-18T21:05:22Z" + }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/chainloop-dev/chainloop@v0.0.0-20231218210522-9bb03950e7fd?package-id=bba8123539840bcd", + "type": "library", + "name": "github.com/chainloop-dev/chainloop", + "version": "v0.0.0-20231218210522-9bb03950e7fd", + "cpe": "cpe:2.3:a:chainloop-dev:chainloop:v0.0.0-20231218210522-9bb03950e7fd:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/chainloop-dev/chainloop@v0.0.0-20231218210522-9bb03950e7fd", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:chainloop_dev:chainloop:v0.0.0-20231218210522-9bb03950e7fd:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:chainloop:chainloop:v0.0.0-20231218210522-9bb03950e7fd:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goBuildSettings:-buildmode", "value": "exe" }, + { "name": "syft:metadata:goBuildSettings:-compiler", "value": "gc" }, + { "name": "syft:metadata:goBuildSettings:-ldflags", "value": "-s -w" }, + { "name": "syft:metadata:goBuildSettings:CGO_ENABLED", "value": "0" }, + { "name": "syft:metadata:goBuildSettings:GOAMD64", "value": "v1" }, + { "name": "syft:metadata:goBuildSettings:GOARCH", "value": "amd64" }, + { "name": "syft:metadata:goBuildSettings:GOOS", "value": "linux" }, + { "name": "syft:metadata:goBuildSettings:vcs", "value": "git" }, + { + "name": "syft:metadata:goBuildSettings:vcs.modified", + "value": "false" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.revision", + "value": "9bb03950e7fd03a573c87188aee4b9a1ff62cfcf" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.time", + "value": "2023-12-18T21:05:22Z" + }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/chainloop-dev/chainloop@v0.55.0?package-id=658c820d400c1e97", + "type": "library", + "name": "github.com/chainloop-dev/chainloop", + "version": "v0.55.0", + "cpe": "cpe:2.3:a:chainloop-dev:chainloop:v0.55.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/chainloop-dev/chainloop@v0.55.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:chainloop_dev:chainloop:v0.55.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:chainloop:chainloop:v0.55.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goBuildSettings:-buildmode", "value": "exe" }, + { "name": "syft:metadata:goBuildSettings:-compiler", "value": "gc" }, + { + "name": "syft:metadata:goBuildSettings:-ldflags", + "value": "-s -w -X github.com/chainloop-dev/chainloop/app/controlplane/internal/server.Version=0.55.0 -X main.Version=0.55.0" + }, + { "name": "syft:metadata:goBuildSettings:CGO_ENABLED", "value": "0" }, + { "name": "syft:metadata:goBuildSettings:GOAMD64", "value": "v1" }, + { "name": "syft:metadata:goBuildSettings:GOARCH", "value": "amd64" }, + { "name": "syft:metadata:goBuildSettings:GOOS", "value": "linux" }, + { "name": "syft:metadata:goBuildSettings:vcs", "value": "git" }, + { + "name": "syft:metadata:goBuildSettings:vcs.modified", + "value": "false" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.revision", + "value": "9bb03950e7fd03a573c87188aee4b9a1ff62cfcf" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.time", + "value": "2023-12-18T21:05:22Z" + }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/chainloop-dev/chainloop@v0.55.0?package-id=7db74d861b21eacb", + "type": "library", + "name": "github.com/chainloop-dev/chainloop", + "version": "v0.55.0", + "cpe": "cpe:2.3:a:chainloop-dev:chainloop:v0.55.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/chainloop-dev/chainloop@v0.55.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:chainloop_dev:chainloop:v0.55.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:chainloop:chainloop:v0.55.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goBuildSettings:-buildmode", "value": "exe" }, + { "name": "syft:metadata:goBuildSettings:-compiler", "value": "gc" }, + { + "name": "syft:metadata:goBuildSettings:-ldflags", + "value": "-s -w -X main.version=0.55.0 -X main.commit=9bb03950e7fd03a573c87188aee4b9a1ff62cfcf -X main.date=2023-12-18T21:24:33Z -X main.builtBy=goreleaser" + }, + { "name": "syft:metadata:goBuildSettings:CGO_ENABLED", "value": "0" }, + { "name": "syft:metadata:goBuildSettings:GOAMD64", "value": "v1" }, + { "name": "syft:metadata:goBuildSettings:GOARCH", "value": "amd64" }, + { "name": "syft:metadata:goBuildSettings:GOOS", "value": "linux" }, + { "name": "syft:metadata:goBuildSettings:vcs", "value": "git" }, + { + "name": "syft:metadata:goBuildSettings:vcs.modified", + "value": "false" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.revision", + "value": "9bb03950e7fd03a573c87188aee4b9a1ff62cfcf" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.time", + "value": "2023-12-18T21:05:22Z" + }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/containerd/stargz-snapshotter/estargz@v0.14.3?package-id=686a6e4236aeef74", + "type": "library", + "name": "github.com/containerd/stargz-snapshotter/estargz", + "version": "v0.14.3", + "cpe": "cpe:2.3:a:containerd:stargz-snapshotter\\/estargz:v0.14.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/containerd/stargz-snapshotter/estargz@v0.14.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:containerd:stargz_snapshotter\\/estargz:v0.14.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:OqlDCK3ZVUO6C3B/5FSkDwbkEETK84kQgEeFwDC+62k=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/coreos/go-oidc/v3@v3.7.0?package-id=5bb29796dc8f458e", + "type": "library", + "name": "github.com/coreos/go-oidc/v3", + "version": "v3.7.0", + "cpe": "cpe:2.3:a:coreos:go-oidc\\/v3:v3.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/coreos/go-oidc/v3@v3.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:coreos:go_oidc\\/v3:v3.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:FTdj0uexT4diYIPlF4yoFVI5MRO1r5+SEcIpEw9vC0o=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/desertbit/timer@v0.0.0-20180107155436-c41aec40b27f?package-id=c9a5cb36fa0626ec", + "type": "library", + "name": "github.com/desertbit/timer", + "version": "v0.0.0-20180107155436-c41aec40b27f", + "cpe": "cpe:2.3:a:desertbit:timer:v0.0.0-20180107155436-c41aec40b27f:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/desertbit/timer@v0.0.0-20180107155436-c41aec40b27f", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:U5y3Y5UE0w7amNe7Z5G/twsBW0KEalRQXZzf8ufSh9I=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/docker/cli@v24.0.7+incompatible?package-id=27567a769e8bef0e", + "type": "library", + "name": "github.com/docker/cli", + "version": "v24.0.7+incompatible", + "cpe": "cpe:2.3:a:docker:cli:v24.0.7\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/cli@v24.0.7+incompatible", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:wa/nIwYFW7BVTGa7SWPVyyXU9lgORqUb1xfI36MSkFg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/docker/distribution@v2.8.3+incompatible?package-id=f0e79f93f1b9fe1f", + "type": "library", + "name": "github.com/docker/distribution", + "version": "v2.8.3+incompatible", + "cpe": "cpe:2.3:a:docker:distribution:v2.8.3\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/distribution@v2.8.3+incompatible", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/docker/docker@v24.0.7+incompatible?package-id=45e3c997c454b1c1", + "type": "library", + "name": "github.com/docker/docker", + "version": "v24.0.7+incompatible", + "cpe": "cpe:2.3:a:docker:docker:v24.0.7\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/docker@v24.0.7+incompatible", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Wo6l37AuwP3JaMnZa226lzVXGA3F9Ig1seQen0cKYlM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/docker/docker-credential-helpers@v0.8.0?package-id=716819da3ff9bbca", + "type": "library", + "name": "github.com/docker/docker-credential-helpers", + "version": "v0.8.0", + "cpe": "cpe:2.3:a:docker:docker-credential-helpers:v0.8.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/docker-credential-helpers@v0.8.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:docker:docker_credential_helpers:v0.8.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:YQFtbBQb4VrpoPxhFuzEBPQ9E16qz5SpHLS+uswaCp8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.0.2?package-id=dff9652cb0c24c53", + "type": "library", + "name": "github.com/envoyproxy/protoc-gen-validate", + "version": "v1.0.2", + "cpe": "cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.0.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:QkIBuU5k+x7/QXPvPPnWXWlCdaBFApVqftFV6k087DA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.0.2?package-id=6d106bfcdcd909d7", + "type": "library", + "name": "github.com/envoyproxy/protoc-gen-validate", + "version": "v1.0.2", + "cpe": "cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.0.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:QkIBuU5k+x7/QXPvPPnWXWlCdaBFApVqftFV6k087DA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.0.2?package-id=4582534ffd87d01b", + "type": "library", + "name": "github.com/envoyproxy/protoc-gen-validate", + "version": "v1.0.2", + "cpe": "cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.0.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:QkIBuU5k+x7/QXPvPPnWXWlCdaBFApVqftFV6k087DA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.0.2?package-id=3f04e019b826b5b3", + "type": "library", + "name": "github.com/envoyproxy/protoc-gen-validate", + "version": "v1.0.2", + "cpe": "cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.0.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:QkIBuU5k+x7/QXPvPPnWXWlCdaBFApVqftFV6k087DA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/fatih/color@v1.15.0?package-id=b4a4fbb00937b4eb", + "type": "library", + "name": "github.com/fatih/color", + "version": "v1.15.0", + "cpe": "cpe:2.3:a:fatih:color:v1.15.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/fatih/color@v1.15.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:kOqh6YHBtK8aywxGerMG2Eq3H6Qgoqeo13Bk2Mv/nBs=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/fatih/color@v1.15.0?package-id=ec28771208351a6b", + "type": "library", + "name": "github.com/fatih/color", + "version": "v1.15.0", + "cpe": "cpe:2.3:a:fatih:color:v1.15.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/fatih/color@v1.15.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:kOqh6YHBtK8aywxGerMG2Eq3H6Qgoqeo13Bk2Mv/nBs=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/fatih/color@v1.15.0?package-id=90635408505c2cab", + "type": "library", + "name": "github.com/fatih/color", + "version": "v1.15.0", + "cpe": "cpe:2.3:a:fatih:color:v1.15.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/fatih/color@v1.15.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:kOqh6YHBtK8aywxGerMG2Eq3H6Qgoqeo13Bk2Mv/nBs=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/fatih/color@v1.15.0?package-id=41c4e853b593bb0d", + "type": "library", + "name": "github.com/fatih/color", + "version": "v1.15.0", + "cpe": "cpe:2.3:a:fatih:color:v1.15.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/fatih/color@v1.15.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:kOqh6YHBtK8aywxGerMG2Eq3H6Qgoqeo13Bk2Mv/nBs=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/fsnotify/fsnotify@v1.7.0?package-id=728a0556ce5c791a", + "type": "library", + "name": "github.com/fsnotify/fsnotify", + "version": "v1.7.0", + "cpe": "cpe:2.3:a:fsnotify:fsnotify:v1.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/fsnotify/fsnotify@v1.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:8JEhPFa5W2WU7YfeZzPNqzMP6Lwt7L2715Ggo0nosvA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/getsentry/sentry-go@v0.23.0?package-id=045e7909541edee5", + "type": "library", + "name": "github.com/getsentry/sentry-go", + "version": "v0.23.0", + "cpe": "cpe:2.3:a:getsentry:sentry-go:v0.23.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/getsentry/sentry-go@v0.23.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:getsentry:sentry_go:v0.23.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:dn+QRCeJv4pPt9OjVXiMcGIBIefaTJPw/h0bZWO05nE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/getsentry/sentry-go@v0.23.0?package-id=1528a74c2603af86", + "type": "library", + "name": "github.com/getsentry/sentry-go", + "version": "v0.23.0", + "cpe": "cpe:2.3:a:getsentry:sentry-go:v0.23.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/getsentry/sentry-go@v0.23.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:getsentry:sentry_go:v0.23.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:dn+QRCeJv4pPt9OjVXiMcGIBIefaTJPw/h0bZWO05nE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/getsentry/sentry-go@v0.23.0?package-id=b88984efc814bd49", + "type": "library", + "name": "github.com/getsentry/sentry-go", + "version": "v0.23.0", + "cpe": "cpe:2.3:a:getsentry:sentry-go:v0.23.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/getsentry/sentry-go@v0.23.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:getsentry:sentry_go:v0.23.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:dn+QRCeJv4pPt9OjVXiMcGIBIefaTJPw/h0bZWO05nE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/getsentry/sentry-go@v0.23.0?package-id=2db7db0fa20f3600", + "type": "library", + "name": "github.com/getsentry/sentry-go", + "version": "v0.23.0", + "cpe": "cpe:2.3:a:getsentry:sentry-go:v0.23.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/getsentry/sentry-go@v0.23.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:getsentry:sentry_go:v0.23.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:dn+QRCeJv4pPt9OjVXiMcGIBIefaTJPw/h0bZWO05nE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-jose/go-jose/v3@v3.0.1?package-id=d485b08b10e24583", + "type": "library", + "name": "github.com/go-jose/go-jose/v3", + "version": "v3.0.1", + "cpe": "cpe:2.3:a:go-jose:go-jose\\/v3:v3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-jose/go-jose/v3@v3.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go-jose:go_jose\\/v3:v3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_jose:go-jose\\/v3:v3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_jose:go_jose\\/v3:v3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:go-jose\\/v3:v3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:go_jose\\/v3:v3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:pWmKFVtt+Jl0vBZTIpz/eAKwsm6LkIxDVVbFHKkchhA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/aegis@v0.2.0?package-id=8e1f2f97b7df4c28", + "type": "library", + "name": "github.com/go-kratos/aegis", + "version": "v0.2.0", + "cpe": "cpe:2.3:a:go-kratos:aegis:v0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/aegis@v0.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:aegis:v0.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:aegis:v0.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:dObzCDWn3XVjUkgxyBp6ZeWtx/do0DPZ7LY3yNSJLUQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/kratos/contrib/log/zap/v2@v2.0.0-20230823024326-a09f4d8ebba9?package-id=4728d79f8c8db4f3", + "type": "library", + "name": "github.com/go-kratos/kratos/contrib/log/zap/v2", + "version": "v2.0.0-20230823024326-a09f4d8ebba9", + "cpe": "cpe:2.3:a:go-kratos:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/kratos/contrib/log/zap/v2@v2.0.0-20230823024326-a09f4d8ebba9", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:j7EHWoqShY20lGhhC1j6v6QkftAqLCBUCHGwDkHL8pU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/kratos/contrib/log/zap/v2@v2.0.0-20230823024326-a09f4d8ebba9?package-id=317beedf635a585a", + "type": "library", + "name": "github.com/go-kratos/kratos/contrib/log/zap/v2", + "version": "v2.0.0-20230823024326-a09f4d8ebba9", + "cpe": "cpe:2.3:a:go-kratos:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/kratos/contrib/log/zap/v2@v2.0.0-20230823024326-a09f4d8ebba9", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:j7EHWoqShY20lGhhC1j6v6QkftAqLCBUCHGwDkHL8pU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/kratos/contrib/log/zap/v2@v2.0.0-20230823024326-a09f4d8ebba9?package-id=7be84dcec7261290", + "type": "library", + "name": "github.com/go-kratos/kratos/contrib/log/zap/v2", + "version": "v2.0.0-20230823024326-a09f4d8ebba9", + "cpe": "cpe:2.3:a:go-kratos:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/kratos/contrib/log/zap/v2@v2.0.0-20230823024326-a09f4d8ebba9", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:j7EHWoqShY20lGhhC1j6v6QkftAqLCBUCHGwDkHL8pU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/kratos/contrib/log/zap/v2@v2.0.0-20230823024326-a09f4d8ebba9?package-id=043b573391ef401c", + "type": "library", + "name": "github.com/go-kratos/kratos/contrib/log/zap/v2", + "version": "v2.0.0-20230823024326-a09f4d8ebba9", + "cpe": "cpe:2.3:a:go-kratos:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/kratos/contrib/log/zap/v2@v2.0.0-20230823024326-a09f4d8ebba9", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:j7EHWoqShY20lGhhC1j6v6QkftAqLCBUCHGwDkHL8pU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/kratos/v2@v2.7.0?package-id=4090a6172f98e169", + "type": "library", + "name": "github.com/go-kratos/kratos/v2", + "version": "v2.7.0", + "cpe": "cpe:2.3:a:go-kratos:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/kratos/v2@v2.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:9DaVgU9YoHPb/BxDVqeVlVCMduRhiSewG3xE+e9ZAZ8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/kratos/v2@v2.7.0?package-id=ae839db7f88fe67d", + "type": "library", + "name": "github.com/go-kratos/kratos/v2", + "version": "v2.7.0", + "cpe": "cpe:2.3:a:go-kratos:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/kratos/v2@v2.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:9DaVgU9YoHPb/BxDVqeVlVCMduRhiSewG3xE+e9ZAZ8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/kratos/v2@v2.7.0?package-id=a5b157e0f92ec487", + "type": "library", + "name": "github.com/go-kratos/kratos/v2", + "version": "v2.7.0", + "cpe": "cpe:2.3:a:go-kratos:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/kratos/v2@v2.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:9DaVgU9YoHPb/BxDVqeVlVCMduRhiSewG3xE+e9ZAZ8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/kratos/v2@v2.7.0?package-id=e450502a3a4aa668", + "type": "library", + "name": "github.com/go-kratos/kratos/v2", + "version": "v2.7.0", + "cpe": "cpe:2.3:a:go-kratos:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/kratos/v2@v2.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:9DaVgU9YoHPb/BxDVqeVlVCMduRhiSewG3xE+e9ZAZ8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-openapi/inflect@v0.19.0?package-id=289a2f1dfd0d68b5", + "type": "library", + "name": "github.com/go-openapi/inflect", + "version": "v0.19.0", + "cpe": "cpe:2.3:a:go-openapi:inflect:v0.19.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-openapi/inflect@v0.19.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_openapi:inflect:v0.19.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:inflect:v0.19.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:9jCH9scKIbHeV9m12SmPilScz6krDxKRasNNSNPXu/4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-playground/form/v4@v4.2.1?package-id=58aa8de83c451d13", + "type": "library", + "name": "github.com/go-playground/form/v4", + "version": "v4.2.1", + "cpe": "cpe:2.3:a:go-playground:form\\/v4:v4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-playground/form/v4@v4.2.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_playground:form\\/v4:v4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:form\\/v4:v4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:HjdRDKO0fftVMU5epjPW2SOREcZ6/wLUzEobqUGJuPw=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.0?package-id=12f14633fda10026", + "type": "library", + "name": "github.com/golang-jwt/jwt/v4", + "version": "v4.5.0", + "cpe": "cpe:2.3:a:golang-jwt:jwt\\/v4:v4.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:golang_jwt:jwt\\/v4:v4.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:golang:jwt\\/v4:v4.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:7cYmW1XlMY7h7ii7UhUyChSgS5wUJEnm9uZVTGqOWzg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.0.0?package-id=654ff9f540b96d15", + "type": "library", + "name": "github.com/golang-jwt/jwt/v5", + "version": "v5.0.0", + "cpe": "cpe:2.3:a:golang-jwt:jwt\\/v5:v5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:golang_jwt:jwt\\/v5:v5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:golang:jwt\\/v5:v5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:1n1XNM9hk7O9mnQoNBGolZvzebBQ7p93ULHRc28XJUE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da?package-id=c2258538dc9e6bea", + "type": "library", + "name": "github.com/golang/groupcache", + "version": "v0.0.0-20210331224755-41bb18bfe9da", + "cpe": "cpe:2.3:a:golang:groupcache:v0.0.0-20210331224755-41bb18bfe9da:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:oI5xCqsCo564l8iNU+DwB5epxmsaqB+rhGL0m5jtYqE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.3?package-id=b024cc583c20e2a8", + "type": "library", + "name": "github.com/golang/protobuf", + "version": "v1.5.3", + "cpe": "cpe:2.3:a:golang:protobuf:v1.5.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.5.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:KhyjKVUg7Usr/dYsdSqoFveMYd5ko72D+zANwlG1mmg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.3?package-id=3a2b1686eb054762", + "type": "library", + "name": "github.com/golang/protobuf", + "version": "v1.5.3", + "cpe": "cpe:2.3:a:golang:protobuf:v1.5.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.5.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:KhyjKVUg7Usr/dYsdSqoFveMYd5ko72D+zANwlG1mmg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.3?package-id=780004816bf4b0da", + "type": "library", + "name": "github.com/golang/protobuf", + "version": "v1.5.3", + "cpe": "cpe:2.3:a:golang:protobuf:v1.5.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.5.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:KhyjKVUg7Usr/dYsdSqoFveMYd5ko72D+zANwlG1mmg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.3?package-id=ee5a1f033d83e402", + "type": "library", + "name": "github.com/golang/protobuf", + "version": "v1.5.3", + "cpe": "cpe:2.3:a:golang:protobuf:v1.5.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.5.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:KhyjKVUg7Usr/dYsdSqoFveMYd5ko72D+zANwlG1mmg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.6.0?package-id=f17f71e539547ce0", + "type": "library", + "name": "github.com/google/go-cmp", + "version": "v0.6.0", + "cpe": "cpe:2.3:a:google:go-cmp:v0.6.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/go-cmp@v0.6.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:google:go_cmp:v0.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/google/go-containerregistry@v0.16.1?package-id=02d241ef7836979c", + "type": "library", + "name": "github.com/google/go-containerregistry", + "version": "v0.16.1", + "cpe": "cpe:2.3:a:google:go-containerregistry:v0.16.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/go-containerregistry@v0.16.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:google:go_containerregistry:v0.16.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:rUEt426sR6nyrL3gt+18ibRcvYpKYdpsa5ZW7MA08dQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/google/go-containerregistry@v0.16.1?package-id=74e42b7bf03d608d", + "type": "library", + "name": "github.com/google/go-containerregistry", + "version": "v0.16.1", + "cpe": "cpe:2.3:a:google:go-containerregistry:v0.16.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/go-containerregistry@v0.16.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:google:go_containerregistry:v0.16.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:rUEt426sR6nyrL3gt+18ibRcvYpKYdpsa5ZW7MA08dQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/google/go-containerregistry@v0.16.1?package-id=bc149772d83bba49", + "type": "library", + "name": "github.com/google/go-containerregistry", + "version": "v0.16.1", + "cpe": "cpe:2.3:a:google:go-containerregistry:v0.16.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/go-containerregistry@v0.16.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:google:go_containerregistry:v0.16.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:rUEt426sR6nyrL3gt+18ibRcvYpKYdpsa5ZW7MA08dQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/google/go-containerregistry@v0.16.1?package-id=7bf6a2c174bce63c", + "type": "library", + "name": "github.com/google/go-containerregistry", + "version": "v0.16.1", + "cpe": "cpe:2.3:a:google:go-containerregistry:v0.16.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/go-containerregistry@v0.16.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:google:go_containerregistry:v0.16.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:rUEt426sR6nyrL3gt+18ibRcvYpKYdpsa5ZW7MA08dQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/google/s2a-go@v0.1.7?package-id=265835a42feeb6ca", + "type": "library", + "name": "github.com/google/s2a-go", + "version": "v0.1.7", + "cpe": "cpe:2.3:a:google:s2a-go:v0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/s2a-go@v0.1.7", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:google:s2a_go:v0.1.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:60BLSyTrOV4/haCDW4zb1guZItoSq8foHCXrAnjBo/o=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/google/uuid@v1.4.0?package-id=ed870ed005991d82", + "type": "library", + "name": "github.com/google/uuid", + "version": "v1.4.0", + "cpe": "cpe:2.3:a:google:uuid:v1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/uuid@v1.4.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:MtMxsa51/r9yyhkyLsVeVt0B+BGQZzpQiTQ4eHZ8bc4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/google/wire@v0.5.0?package-id=787b86e895ad56f1", + "type": "library", + "name": "github.com/google/wire", + "version": "v0.5.0", + "cpe": "cpe:2.3:a:google:wire:v0.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/wire@v0.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:I7ELFeVBr3yfPIcc8+MWvrjk+3VjbcSzoXm3JVa+jD8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.2?package-id=8584b7cf943f4058", + "type": "library", + "name": "github.com/googleapis/enterprise-certificate-proxy", + "version": "v0.3.2", + "cpe": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Vie5ybvEvT75RniqhfFxPRy3Bf7vr3h0cechB90XaQs=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/googleapis/gax-go/v2@v2.12.0?package-id=f69a55c247a8b18d", + "type": "library", + "name": "github.com/googleapis/gax-go/v2", + "version": "v2.12.0", + "cpe": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.12.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/googleapis/gax-go/v2@v2.12.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:googleapis:gax_go\\/v2:v2.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:A+gCJKdRfqXkr+BIRGtZLibNXf0m1f9E4HG56etFpas=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/gorilla/mux@v1.8.0?package-id=6129c87581ddc58a", + "type": "library", + "name": "github.com/gorilla/mux", + "version": "v1.8.0", + "cpe": "cpe:2.3:a:gorilla:mux:v1.8.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gorilla/mux@v1.8.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:i40aqfkR1h2SlN9hojwV5ZA91wcXFOvkdNIeFDP5koI=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/grpc-ecosystem/go-grpc-middleware@v1.4.0?package-id=5e6f93c1db1c9d94", + "type": "library", + "name": "github.com/grpc-ecosystem/go-grpc-middleware", + "version": "v1.4.0", + "cpe": "cpe:2.3:a:grpc-ecosystem:go-grpc-middleware:v1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/grpc-ecosystem/go-grpc-middleware@v1.4.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc-ecosystem:go_grpc_middleware:v1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc_ecosystem:go-grpc-middleware:v1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc_ecosystem:go_grpc_middleware:v1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc:go-grpc-middleware:v1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc:go_grpc_middleware:v1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:UH//fgunKIs4JdUbpDl1VZCDaL56wXCB/5+wF6uHfaI=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/grpc-ecosystem/go-grpc-prometheus@v1.2.0?package-id=9fa58b5ce80ba78a", + "type": "library", + "name": "github.com/grpc-ecosystem/go-grpc-prometheus", + "version": "v1.2.0", + "cpe": "cpe:2.3:a:grpc-ecosystem:go-grpc-prometheus:v1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/grpc-ecosystem/go-grpc-prometheus@v1.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc-ecosystem:go_grpc_prometheus:v1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc_ecosystem:go-grpc-prometheus:v1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc_ecosystem:go_grpc_prometheus:v1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc:go-grpc-prometheus:v1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc:go_grpc_prometheus:v1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Ovs26xHkKqVztRpIrF/92BcuyuQ/YW4NSIpoGtfXNho=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0?package-id=1c59068ffdcfd1cd", + "type": "library", + "name": "github.com/hashicorp/errwrap", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2?package-id=501fb5a55e961e3d", + "type": "library", + "name": "github.com/hashicorp/go-cleanhttp", + "version": "v0.5.2", + "cpe": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-hclog@v1.5.0?package-id=7b6e718ddd909d39", + "type": "library", + "name": "github.com/hashicorp/go-hclog", + "version": "v1.5.0", + "cpe": "cpe:2.3:a:hashicorp:go-hclog:v1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-hclog@v1.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_hclog:v1.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:bI2ocEMgcVlz55Oj1xZNBsVi900c7II+fWDyV9o+13c=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-hclog@v1.5.0?package-id=ee46c99ffdd7d6ed", + "type": "library", + "name": "github.com/hashicorp/go-hclog", + "version": "v1.5.0", + "cpe": "cpe:2.3:a:hashicorp:go-hclog:v1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-hclog@v1.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_hclog:v1.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:bI2ocEMgcVlz55Oj1xZNBsVi900c7II+fWDyV9o+13c=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-hclog@v1.5.0?package-id=653e77e41469c1ef", + "type": "library", + "name": "github.com/hashicorp/go-hclog", + "version": "v1.5.0", + "cpe": "cpe:2.3:a:hashicorp:go-hclog:v1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-hclog@v1.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_hclog:v1.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:bI2ocEMgcVlz55Oj1xZNBsVi900c7II+fWDyV9o+13c=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-hclog@v1.5.0?package-id=ddab282552a53236", + "type": "library", + "name": "github.com/hashicorp/go-hclog", + "version": "v1.5.0", + "cpe": "cpe:2.3:a:hashicorp:go-hclog:v1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-hclog@v1.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_hclog:v1.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:bI2ocEMgcVlz55Oj1xZNBsVi900c7II+fWDyV9o+13c=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1?package-id=3864865c5f214cb3", + "type": "library", + "name": "github.com/hashicorp/go-multierror", + "version": "v1.1.1", + "cpe": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-plugin@v1.4.10?package-id=2d0a24843f1023ee", + "type": "library", + "name": "github.com/hashicorp/go-plugin", + "version": "v1.4.10", + "cpe": "cpe:2.3:a:hashicorp:go-plugin:v1.4.10:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-plugin@v1.4.10", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_plugin:v1.4.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:xUbmA4jC6Dq163/fWcp8P3JuHilrHHMLNRxzGQJ9hNk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-plugin@v1.4.10?package-id=45d2769961e4d749", + "type": "library", + "name": "github.com/hashicorp/go-plugin", + "version": "v1.4.10", + "cpe": "cpe:2.3:a:hashicorp:go-plugin:v1.4.10:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-plugin@v1.4.10", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_plugin:v1.4.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:xUbmA4jC6Dq163/fWcp8P3JuHilrHHMLNRxzGQJ9hNk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-plugin@v1.4.10?package-id=6fd5eb73bf7b8c4d", + "type": "library", + "name": "github.com/hashicorp/go-plugin", + "version": "v1.4.10", + "cpe": "cpe:2.3:a:hashicorp:go-plugin:v1.4.10:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-plugin@v1.4.10", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_plugin:v1.4.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:xUbmA4jC6Dq163/fWcp8P3JuHilrHHMLNRxzGQJ9hNk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-plugin@v1.4.10?package-id=e00533dc215afacd", + "type": "library", + "name": "github.com/hashicorp/go-plugin", + "version": "v1.4.10", + "cpe": "cpe:2.3:a:hashicorp:go-plugin:v1.4.10:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-plugin@v1.4.10", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_plugin:v1.4.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:xUbmA4jC6Dq163/fWcp8P3JuHilrHHMLNRxzGQJ9hNk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.4?package-id=b4a9ec70d89ec36e", + "type": "library", + "name": "github.com/hashicorp/go-retryablehttp", + "version": "v0.7.4", + "cpe": "cpe:2.3:a:hashicorp:go-retryablehttp:v0.7.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_retryablehttp:v0.7.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ZQgVdpTdAL7WpMIwLzCfbalOcSUdkDZnpUv3/+BxzFA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-rootcerts@v1.0.2?package-id=252294a025922c50", + "type": "library", + "name": "github.com/hashicorp/go-rootcerts", + "version": "v1.0.2", + "cpe": "cpe:2.3:a:hashicorp:go-rootcerts:v1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-rootcerts@v1.0.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_rootcerts:v1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jzhAVGtqPKbwpyCPELlgNWhE1znq+qwJtW5Oi2viEzc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.1.7?package-id=519e70fdc958ebf1", + "type": "library", + "name": "github.com/hashicorp/go-secure-stdlib/parseutil", + "version": "v0.1.7", + "cpe": "cpe:2.3:a:hashicorp:go-secure-stdlib\\/parseutil:v0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.1.7", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_secure_stdlib\\/parseutil:v0.1.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:UpiO20jno/eV1eVZcxqWnUohyKRe1g8FPV/xH1s/2qs=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2?package-id=991aeda9dce2fe56", + "type": "library", + "name": "github.com/hashicorp/go-secure-stdlib/strutil", + "version": "v0.1.2", + "cpe": "cpe:2.3:a:hashicorp:go-secure-stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_secure_stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:kes8mmyCpxJsI7FTwtzRqEy9CdjCtrXrXGuOpxEA7Ts=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.5?package-id=23e13ad425ad6e5c", + "type": "library", + "name": "github.com/hashicorp/go-sockaddr", + "version": "v1.0.5", + "cpe": "cpe:2.3:a:hashicorp:go-sockaddr:v1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.5", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_sockaddr:v1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:dvk7TIXCZpmfOlM+9mlcrWmWjw/wlKT+VDq2wMvfPJU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-5?package-id=dc55449089a6c8e5", + "type": "library", + "name": "github.com/hashicorp/hcl", + "version": "v1.0.1-vault-5", + "cpe": "cpe:2.3:a:hashicorp:hcl:v1.0.1-vault-5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-5", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:kI3hhbbyzr4dldA8UdTb7ZlVVlI2DACdCfz31RPDgJM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/hcl/v2@v2.17.0?package-id=706b1f07ea77cde8", + "type": "library", + "name": "github.com/hashicorp/hcl/v2", + "version": "v2.17.0", + "cpe": "cpe:2.3:a:hashicorp:hcl\\/v2:v2.17.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/hcl/v2@v2.17.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:z1XvSUyXd1HP10U4lrLg5e0JMVz6CPaJvAgxM0KNZVY=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/vault/api@v1.10.0?package-id=2d00d7594abd3443", + "type": "library", + "name": "github.com/hashicorp/vault/api", + "version": "v1.10.0", + "cpe": "cpe:2.3:a:hashicorp:vault\\/api:v1.10.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/vault/api@v1.10.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:/US7sIjWN6Imp4o/Rj1Ce2Nr5bki/AXi9vAW3p2tOJQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/yamux@v0.1.1?package-id=8177feea2ed1d616", + "type": "library", + "name": "github.com/hashicorp/yamux", + "version": "v0.1.1", + "cpe": "cpe:2.3:a:hashicorp:yamux:v0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/yamux@v0.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:yrQxtgseBDrq9Y652vSRDvsKCJKOUD+GzTS4Y0Y8pvE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/yamux@v0.1.1?package-id=07ca978ec5c9a360", + "type": "library", + "name": "github.com/hashicorp/yamux", + "version": "v0.1.1", + "cpe": "cpe:2.3:a:hashicorp:yamux:v0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/yamux@v0.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:yrQxtgseBDrq9Y652vSRDvsKCJKOUD+GzTS4Y0Y8pvE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/yamux@v0.1.1?package-id=7d8cd718d2be8437", + "type": "library", + "name": "github.com/hashicorp/yamux", + "version": "v0.1.1", + "cpe": "cpe:2.3:a:hashicorp:yamux:v0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/yamux@v0.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:yrQxtgseBDrq9Y652vSRDvsKCJKOUD+GzTS4Y0Y8pvE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/yamux@v0.1.1?package-id=771c0af0d56eb159", + "type": "library", + "name": "github.com/hashicorp/yamux", + "version": "v0.1.1", + "cpe": "cpe:2.3:a:hashicorp:yamux:v0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/yamux@v0.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:yrQxtgseBDrq9Y652vSRDvsKCJKOUD+GzTS4Y0Y8pvE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hedwigz/entviz@v0.0.0-20221011080911-9d47f6f1d818?package-id=5068dba1bb56ca6a", + "type": "library", + "name": "github.com/hedwigz/entviz", + "version": "v0.0.0-20221011080911-9d47f6f1d818", + "cpe": "cpe:2.3:a:hedwigz:entviz:v0.0.0-20221011080911-9d47f6f1d818:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hedwigz/entviz@v0.0.0-20221011080911-9d47f6f1d818", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:IIK1IY/v9aqVpaNXTr/rkoEnOc4rH3KbPYZYZLP3N04=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/iancoleman/orderedmap@v0.3.0?package-id=185ad0411659e93b", + "type": "library", + "name": "github.com/iancoleman/orderedmap", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:iancoleman:orderedmap:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/iancoleman/orderedmap@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:5cbR2grmZR/DiVt+VJopEhtVs9YGInGIxAoMJn+Ichc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/iancoleman/orderedmap@v0.3.0?package-id=d5726afa02a72504", + "type": "library", + "name": "github.com/iancoleman/orderedmap", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:iancoleman:orderedmap:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/iancoleman/orderedmap@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:5cbR2grmZR/DiVt+VJopEhtVs9YGInGIxAoMJn+Ichc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/iancoleman/orderedmap@v0.3.0?package-id=d642378509211a21", + "type": "library", + "name": "github.com/iancoleman/orderedmap", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:iancoleman:orderedmap:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/iancoleman/orderedmap@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:5cbR2grmZR/DiVt+VJopEhtVs9YGInGIxAoMJn+Ichc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/iancoleman/orderedmap@v0.3.0?package-id=c3c3818f5d8afe8b", + "type": "library", + "name": "github.com/iancoleman/orderedmap", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:iancoleman:orderedmap:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/iancoleman/orderedmap@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:5cbR2grmZR/DiVt+VJopEhtVs9YGInGIxAoMJn+Ichc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/imdario/mergo@v0.3.16?package-id=170cddbb5b28a932", + "type": "library", + "name": "github.com/imdario/mergo", + "version": "v0.3.16", + "cpe": "cpe:2.3:a:imdario:mergo:v0.3.16:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/imdario/mergo@v0.3.16", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:wwQJbIsHYGMUyLSPrEq1CT16AhnhNJQ51+4fdHUnCl4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/improbable-eng/grpc-web@v0.15.0?package-id=cae4f5c6d580dd35", + "type": "library", + "name": "github.com/improbable-eng/grpc-web", + "version": "v0.15.0", + "cpe": "cpe:2.3:a:improbable-eng:grpc-web:v0.15.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/improbable-eng/grpc-web@v0.15.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:improbable-eng:grpc_web:v0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:improbable_eng:grpc-web:v0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:improbable_eng:grpc_web:v0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:improbable:grpc-web:v0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:improbable:grpc_web:v0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:BN+7z6uNXZ1tQGcNAuaU1YjsLTApzkjt2tzCixLaUPQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/in-toto/attestation@v0.1.1-0.20231010121940-09a03152c04a?package-id=529628437f52b006", + "type": "library", + "name": "github.com/in-toto/attestation", + "version": "v0.1.1-0.20231010121940-09a03152c04a", + "cpe": "cpe:2.3:a:in-toto:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/in-toto/attestation@v0.1.1-0.20231010121940-09a03152c04a", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:in_toto:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:in:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:y4ZRSC/GJWAFi+u9t7sNxjNsQKQvFKca1qc3Wr1ZX6Q=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/in-toto/attestation@v0.1.1-0.20231010121940-09a03152c04a?package-id=84d90143f8175704", + "type": "library", + "name": "github.com/in-toto/attestation", + "version": "v0.1.1-0.20231010121940-09a03152c04a", + "cpe": "cpe:2.3:a:in-toto:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/in-toto/attestation@v0.1.1-0.20231010121940-09a03152c04a", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:in_toto:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:in:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:y4ZRSC/GJWAFi+u9t7sNxjNsQKQvFKca1qc3Wr1ZX6Q=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/in-toto/attestation@v0.1.1-0.20231010121940-09a03152c04a?package-id=1a7282217ffdcdf3", + "type": "library", + "name": "github.com/in-toto/attestation", + "version": "v0.1.1-0.20231010121940-09a03152c04a", + "cpe": "cpe:2.3:a:in-toto:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/in-toto/attestation@v0.1.1-0.20231010121940-09a03152c04a", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:in_toto:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:in:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:y4ZRSC/GJWAFi+u9t7sNxjNsQKQvFKca1qc3Wr1ZX6Q=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/in-toto/attestation@v0.1.1-0.20231010121940-09a03152c04a?package-id=14f84f5dadfa1f30", + "type": "library", + "name": "github.com/in-toto/attestation", + "version": "v0.1.1-0.20231010121940-09a03152c04a", + "cpe": "cpe:2.3:a:in-toto:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/in-toto/attestation@v0.1.1-0.20231010121940-09a03152c04a", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:in_toto:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:in:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:y4ZRSC/GJWAFi+u9t7sNxjNsQKQvFKca1qc3Wr1ZX6Q=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/invopop/jsonschema@v0.7.0?package-id=035710c852e5c0cc", + "type": "library", + "name": "github.com/invopop/jsonschema", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:invopop:jsonschema:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/invopop/jsonschema@v0.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:2vgQcBz1n256N+FpX3Jq7Y17AjYt46Ig3zIWyy770So=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/invopop/jsonschema@v0.7.0?package-id=7aa1bf2b0f67bd7b", + "type": "library", + "name": "github.com/invopop/jsonschema", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:invopop:jsonschema:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/invopop/jsonschema@v0.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:2vgQcBz1n256N+FpX3Jq7Y17AjYt46Ig3zIWyy770So=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/invopop/jsonschema@v0.7.0?package-id=711e91a510db5087", + "type": "library", + "name": "github.com/invopop/jsonschema", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:invopop:jsonschema:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/invopop/jsonschema@v0.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:2vgQcBz1n256N+FpX3Jq7Y17AjYt46Ig3zIWyy770So=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/invopop/jsonschema@v0.7.0?package-id=2da4be1610d9cdf4", + "type": "library", + "name": "github.com/invopop/jsonschema", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:invopop:jsonschema:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/invopop/jsonschema@v0.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:2vgQcBz1n256N+FpX3Jq7Y17AjYt46Ig3zIWyy770So=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/jackc/pgpassfile@v1.0.0?package-id=40b72b18254a790f", + "type": "library", + "name": "github.com/jackc/pgpassfile", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:jackc:pgpassfile:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jackc/pgpassfile@v1.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:/6Hmqy13Ss2zCq62VdNG8tM1wchn8zjSGOBJ6icpsIM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/jackc/pgservicefile@v0.0.0-20221227161230-091c0ba34f0a?package-id=5fbb5129fc6f29a1", + "type": "library", + "name": "github.com/jackc/pgservicefile", + "version": "v0.0.0-20221227161230-091c0ba34f0a", + "cpe": "cpe:2.3:a:jackc:pgservicefile:v0.0.0-20221227161230-091c0ba34f0a:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jackc/pgservicefile@v0.0.0-20221227161230-091c0ba34f0a", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:bbPeKD0xmW/Y25WS6cokEszi5g+S0QxI/d45PkRi7Nk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/jackc/pgx/v5@v5.4.3?package-id=b0784d9101783bee", + "type": "library", + "name": "github.com/jackc/pgx/v5", + "version": "v5.4.3", + "cpe": "cpe:2.3:a:jackc:pgx\\/v5:v5.4.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jackc/pgx/v5@v5.4.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:cxFyXhxlvAifxnkKKdlxv8XqUf59tDlYjnV5YYfsJJY=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7?package-id=6252410ef7219e92", + "type": "library", + "name": "github.com/jedib0t/go-pretty/v6", + "version": "v6.4.7", + "cpe": "cpe:2.3:a:jedib0t:go-pretty\\/v6:v6.4.7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jedib0t:go_pretty\\/v6:v6.4.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lwiTJr1DEkAgzljsUsORmWsVn5MQjt1BPJdPCtJ6KXE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7?package-id=568ddb435a4507d6", + "type": "library", + "name": "github.com/jedib0t/go-pretty/v6", + "version": "v6.4.7", + "cpe": "cpe:2.3:a:jedib0t:go-pretty\\/v6:v6.4.7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jedib0t:go_pretty\\/v6:v6.4.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lwiTJr1DEkAgzljsUsORmWsVn5MQjt1BPJdPCtJ6KXE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7?package-id=7ede02e2a76526c1", + "type": "library", + "name": "github.com/jedib0t/go-pretty/v6", + "version": "v6.4.7", + "cpe": "cpe:2.3:a:jedib0t:go-pretty\\/v6:v6.4.7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jedib0t:go_pretty\\/v6:v6.4.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lwiTJr1DEkAgzljsUsORmWsVn5MQjt1BPJdPCtJ6KXE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7?package-id=622b3af4eb969233", + "type": "library", + "name": "github.com/jedib0t/go-pretty/v6", + "version": "v6.4.7", + "cpe": "cpe:2.3:a:jedib0t:go-pretty\\/v6:v6.4.7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jedib0t:go_pretty\\/v6:v6.4.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lwiTJr1DEkAgzljsUsORmWsVn5MQjt1BPJdPCtJ6KXE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/jmespath/go-jmespath@v0.4.0?package-id=72d7cf810d915842", + "type": "library", + "name": "github.com/jmespath/go-jmespath", + "version": "v0.4.0", + "cpe": "cpe:2.3:a:jmespath:go-jmespath:v0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jmespath/go-jmespath@v0.4.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jmespath:go_jmespath:v0.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/klauspost/compress@v1.17.2?package-id=b6642d6183fa6e7e", + "type": "library", + "name": "github.com/klauspost/compress", + "version": "v1.17.2", + "cpe": "cpe:2.3:a:klauspost:compress:v1.17.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/klauspost/compress@v1.17.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:RlWWUY/Dr4fL8qk9YG7DTZ7PDgME2V4csBXA8L/ixi4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/kylelemons/godebug@v1.1.0?package-id=034c3d863ccc93fc", + "type": "library", + "name": "github.com/kylelemons/godebug", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:kylelemons:godebug:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/kylelemons/godebug@v1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-colorable@v0.1.13?package-id=ba67eb830e8cd07f", + "type": "library", + "name": "github.com/mattn/go-colorable", + "version": "v0.1.13", + "cpe": "cpe:2.3:a:mattn:go-colorable:v0.1.13:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.13", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_colorable:v0.1.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-colorable@v0.1.13?package-id=181e73e676a67383", + "type": "library", + "name": "github.com/mattn/go-colorable", + "version": "v0.1.13", + "cpe": "cpe:2.3:a:mattn:go-colorable:v0.1.13:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.13", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_colorable:v0.1.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-colorable@v0.1.13?package-id=d5c1c50fe4921646", + "type": "library", + "name": "github.com/mattn/go-colorable", + "version": "v0.1.13", + "cpe": "cpe:2.3:a:mattn:go-colorable:v0.1.13:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.13", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_colorable:v0.1.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-colorable@v0.1.13?package-id=6a6b341c5baf899e", + "type": "library", + "name": "github.com/mattn/go-colorable", + "version": "v0.1.13", + "cpe": "cpe:2.3:a:mattn:go-colorable:v0.1.13:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.13", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_colorable:v0.1.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.19?package-id=76acab36c74c9ad2", + "type": "library", + "name": "github.com/mattn/go-isatty", + "version": "v0.0.19", + "cpe": "cpe:2.3:a:mattn:go-isatty:v0.0.19:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.19", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_isatty:v0.0.19:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:JITubQf0MOLdlGRuRq+jtsDlekdYPia9ZFsB8h/APPA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.19?package-id=b48201623611b494", + "type": "library", + "name": "github.com/mattn/go-isatty", + "version": "v0.0.19", + "cpe": "cpe:2.3:a:mattn:go-isatty:v0.0.19:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.19", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_isatty:v0.0.19:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:JITubQf0MOLdlGRuRq+jtsDlekdYPia9ZFsB8h/APPA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.19?package-id=c53ace3b4d4f08fd", + "type": "library", + "name": "github.com/mattn/go-isatty", + "version": "v0.0.19", + "cpe": "cpe:2.3:a:mattn:go-isatty:v0.0.19:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.19", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_isatty:v0.0.19:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:JITubQf0MOLdlGRuRq+jtsDlekdYPia9ZFsB8h/APPA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.19?package-id=03566c9ab5871fbc", + "type": "library", + "name": "github.com/mattn/go-isatty", + "version": "v0.0.19", + "cpe": "cpe:2.3:a:mattn:go-isatty:v0.0.19:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.19", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_isatty:v0.0.19:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:JITubQf0MOLdlGRuRq+jtsDlekdYPia9ZFsB8h/APPA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15?package-id=51d96c9851fd4731", + "type": "library", + "name": "github.com/mattn/go-runewidth", + "version": "v0.0.15", + "cpe": "cpe:2.3:a:mattn:go-runewidth:v0.0.15:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_runewidth:v0.0.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:UNAjwbU9l54TA3KzvqLGxwWjHmMgBUVhBiTjelZgg3U=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15?package-id=030f03222956c418", + "type": "library", + "name": "github.com/mattn/go-runewidth", + "version": "v0.0.15", + "cpe": "cpe:2.3:a:mattn:go-runewidth:v0.0.15:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_runewidth:v0.0.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:UNAjwbU9l54TA3KzvqLGxwWjHmMgBUVhBiTjelZgg3U=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15?package-id=b2dbc52834961291", + "type": "library", + "name": "github.com/mattn/go-runewidth", + "version": "v0.0.15", + "cpe": "cpe:2.3:a:mattn:go-runewidth:v0.0.15:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_runewidth:v0.0.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:UNAjwbU9l54TA3KzvqLGxwWjHmMgBUVhBiTjelZgg3U=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15?package-id=6be8ac9e8c1b6b7c", + "type": "library", + "name": "github.com/mattn/go-runewidth", + "version": "v0.0.15", + "cpe": "cpe:2.3:a:mattn:go-runewidth:v0.0.15:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_runewidth:v0.0.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:UNAjwbU9l54TA3KzvqLGxwWjHmMgBUVhBiTjelZgg3U=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/matttproud/golang_protobuf_extensions/v2@v2.0.0?package-id=9f8de9a4b0fce2d2", + "type": "library", + "name": "github.com/matttproud/golang_protobuf_extensions/v2", + "version": "v2.0.0", + "cpe": "cpe:2.3:a:matttproud:golang-protobuf-extensions\\/v2:v2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/matttproud/golang_protobuf_extensions/v2@v2.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:matttproud:golang_protobuf_extensions\\/v2:v2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jWpvCLoY8Z/e3VKvlsiIGKtc+UG6U5vzxaoagmhXfyg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0?package-id=bf10ca687e280acc", + "type": "library", + "name": "github.com/mitchellh/go-homedir", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:mitchellh:go-homedir:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mitchellh:go_homedir:v1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mitchellh/go-testing-interface@v1.14.1?package-id=d835d37e22d7bfc6", + "type": "library", + "name": "github.com/mitchellh/go-testing-interface", + "version": "v1.14.1", + "cpe": "cpe:2.3:a:mitchellh:go-testing-interface:v1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/go-testing-interface@v1.14.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mitchellh:go_testing_interface:v1.14.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jrgshOhYAUVNMAJiKbEu7EqAwgJJ2JqpQmpLJOu07cU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mitchellh/go-testing-interface@v1.14.1?package-id=b2baba17dbf58921", + "type": "library", + "name": "github.com/mitchellh/go-testing-interface", + "version": "v1.14.1", + "cpe": "cpe:2.3:a:mitchellh:go-testing-interface:v1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/go-testing-interface@v1.14.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mitchellh:go_testing_interface:v1.14.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jrgshOhYAUVNMAJiKbEu7EqAwgJJ2JqpQmpLJOu07cU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mitchellh/go-testing-interface@v1.14.1?package-id=e5e5f80aac76aef8", + "type": "library", + "name": "github.com/mitchellh/go-testing-interface", + "version": "v1.14.1", + "cpe": "cpe:2.3:a:mitchellh:go-testing-interface:v1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/go-testing-interface@v1.14.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mitchellh:go_testing_interface:v1.14.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jrgshOhYAUVNMAJiKbEu7EqAwgJJ2JqpQmpLJOu07cU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mitchellh/go-testing-interface@v1.14.1?package-id=f375eae2fe488957", + "type": "library", + "name": "github.com/mitchellh/go-testing-interface", + "version": "v1.14.1", + "cpe": "cpe:2.3:a:mitchellh:go-testing-interface:v1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/go-testing-interface@v1.14.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mitchellh:go_testing_interface:v1.14.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jrgshOhYAUVNMAJiKbEu7EqAwgJJ2JqpQmpLJOu07cU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1?package-id=c18eddaed70bb25c", + "type": "library", + "name": "github.com/mitchellh/go-wordwrap", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:mitchellh:go-wordwrap:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mitchellh:go_wordwrap:v1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:TLuKupo69TCn6TQSyGxwI1EblZZEsQ0vMlAFQflz0v0=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.0?package-id=26c3d47653655ad0", + "type": "library", + "name": "github.com/mitchellh/mapstructure", + "version": "v1.5.0", + "cpe": "cpe:2.3:a:mitchellh:mapstructure:v1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jeMsZIYE/09sWLaz43PL7Gy6RuMjD2eJVyuac5Z2hdY=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/moby/moby@v24.0.5+incompatible?package-id=a21d338c2cd1ab2c", + "type": "library", + "name": "github.com/moby/moby", + "version": "v24.0.5+incompatible", + "cpe": "cpe:2.3:a:moby:moby:v24.0.5\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/moby/moby@v24.0.5+incompatible", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:uUbydai/Y9J7Ybt+lFI3zBdnsMYXnXE9vEcfZDoEE8Q=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/muesli/reflow@v0.3.0?package-id=26c5bd787e49c7c1", + "type": "library", + "name": "github.com/muesli/reflow", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:muesli:reflow:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/muesli/reflow@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:IFsN6K9NfGtjeggFP+68I4chLZV2yIKsXJFNZ+eWh6s=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/muesli/reflow@v0.3.0?package-id=ce4bb77a761a0e34", + "type": "library", + "name": "github.com/muesli/reflow", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:muesli:reflow:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/muesli/reflow@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:IFsN6K9NfGtjeggFP+68I4chLZV2yIKsXJFNZ+eWh6s=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/muesli/reflow@v0.3.0?package-id=4345390b16e0bd85", + "type": "library", + "name": "github.com/muesli/reflow", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:muesli:reflow:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/muesli/reflow@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:IFsN6K9NfGtjeggFP+68I4chLZV2yIKsXJFNZ+eWh6s=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/muesli/reflow@v0.3.0?package-id=8ce172e7de51ae13", + "type": "library", + "name": "github.com/muesli/reflow", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:muesli:reflow:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/muesli/reflow@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:IFsN6K9NfGtjeggFP+68I4chLZV2yIKsXJFNZ+eWh6s=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/oklog/run@v1.1.0?package-id=11f45d597027b527", + "type": "library", + "name": "github.com/oklog/run", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:oklog:run:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/oklog/run@v1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:GEenZ1cK0+q0+wsJew9qUg/DyD8k3JzYsZAi5gYi2mA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/oklog/run@v1.1.0?package-id=2df7f58655355482", + "type": "library", + "name": "github.com/oklog/run", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:oklog:run:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/oklog/run@v1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:GEenZ1cK0+q0+wsJew9qUg/DyD8k3JzYsZAi5gYi2mA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/oklog/run@v1.1.0?package-id=1f8528de7938e8de", + "type": "library", + "name": "github.com/oklog/run", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:oklog:run:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/oklog/run@v1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:GEenZ1cK0+q0+wsJew9qUg/DyD8k3JzYsZAi5gYi2mA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/oklog/run@v1.1.0?package-id=fbc4e8fd079bf973", + "type": "library", + "name": "github.com/oklog/run", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:oklog:run:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/oklog/run@v1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:GEenZ1cK0+q0+wsJew9qUg/DyD8k3JzYsZAi5gYi2mA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0?package-id=3634802719c473b6", + "type": "library", + "name": "github.com/opencontainers/go-digest", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/opencontainers/image-spec@v1.1.0-rc5?package-id=f9d87ab96bbf5f09", + "type": "library", + "name": "github.com/opencontainers/image-spec", + "version": "v1.1.0-rc5", + "cpe": "cpe:2.3:a:opencontainers:image-spec:v1.1.0-rc5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/opencontainers/image-spec@v1.1.0-rc5", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:opencontainers:image_spec:v1.1.0-rc5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Ygwkfw9bpDvs+c9E34SdgGOj41dX/cbdlwvlWt0pnFI=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/pkg/browser@v0.0.0-20210911075715-681adbf594b8?package-id=6320a655f8fa3a6e", + "type": "library", + "name": "github.com/pkg/browser", + "version": "v0.0.0-20210911075715-681adbf594b8", + "cpe": "cpe:2.3:a:pkg:browser:v0.0.0-20210911075715-681adbf594b8:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/pkg/browser@v0.0.0-20210911075715-681adbf594b8", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:KoWmjvw+nsYOo29YJK9vDA65RGE3NrOnUtO7a+RF9HU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/pkg/errors@v0.9.1?package-id=8e17fb994454d3dc", + "type": "library", + "name": "github.com/pkg/errors", + "version": "v0.9.1", + "cpe": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/pkg/errors@v0.9.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/prometheus/client_golang@v1.17.0?package-id=d1c4975ae4840eda", + "type": "library", + "name": "github.com/prometheus/client_golang", + "version": "v1.17.0", + "cpe": "cpe:2.3:a:prometheus:client-golang:v1.17.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/client_golang@v1.17.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prometheus:client_golang:v1.17.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:rl2sfwZMtSthVU752MqfjQozy7blglC+1SOtjMAMh+Q=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/prometheus/client_model@v0.5.0?package-id=766ebda083f3307f", + "type": "library", + "name": "github.com/prometheus/client_model", + "version": "v0.5.0", + "cpe": "cpe:2.3:a:prometheus:client-model:v0.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/client_model@v0.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prometheus:client_model:v0.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:VQw1hfvPvk3Uv6Qf29VrPF32JB6rtbgI6cYPYQjL0Qw=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/prometheus/common@v0.45.0?package-id=d52f33aa31123797", + "type": "library", + "name": "github.com/prometheus/common", + "version": "v0.45.0", + "cpe": "cpe:2.3:a:prometheus:common:v0.45.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/common@v0.45.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:2BGz0eBc2hdMDLnO/8n0jeB3oPrt2D08CekT0lneoxM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/prometheus/procfs@v0.12.0?package-id=9881fe5965a12d1a", + "type": "library", + "name": "github.com/prometheus/procfs", + "version": "v0.12.0", + "cpe": "cpe:2.3:a:prometheus:procfs:v0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/procfs@v0.12.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jluTpSng7V9hY0O2R9DzzJHYb2xULk9VTR1V1R/k6Bo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/rivo/uniseg@v0.4.4?package-id=00f2cbcd10e6a103", + "type": "library", + "name": "github.com/rivo/uniseg", + "version": "v0.4.4", + "cpe": "cpe:2.3:a:rivo:uniseg:v0.4.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rivo/uniseg@v0.4.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:8TfxU8dW6PdqD27gjM8MVNuicgxIjxpm4K7x4jp8sis=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/rivo/uniseg@v0.4.4?package-id=3e0ad65ed06cfbc7", + "type": "library", + "name": "github.com/rivo/uniseg", + "version": "v0.4.4", + "cpe": "cpe:2.3:a:rivo:uniseg:v0.4.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rivo/uniseg@v0.4.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:8TfxU8dW6PdqD27gjM8MVNuicgxIjxpm4K7x4jp8sis=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/rivo/uniseg@v0.4.4?package-id=d314b2241df4ffaa", + "type": "library", + "name": "github.com/rivo/uniseg", + "version": "v0.4.4", + "cpe": "cpe:2.3:a:rivo:uniseg:v0.4.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rivo/uniseg@v0.4.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:8TfxU8dW6PdqD27gjM8MVNuicgxIjxpm4K7x4jp8sis=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/rivo/uniseg@v0.4.4?package-id=e7dbbccb2ef0d6cb", + "type": "library", + "name": "github.com/rivo/uniseg", + "version": "v0.4.4", + "cpe": "cpe:2.3:a:rivo:uniseg:v0.4.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rivo/uniseg@v0.4.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:8TfxU8dW6PdqD27gjM8MVNuicgxIjxpm4K7x4jp8sis=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/rs/cors@v1.10.1?package-id=5217f781fdfebf03", + "type": "library", + "name": "github.com/rs/cors", + "version": "v1.10.1", + "cpe": "cpe:2.3:a:rs:cors:v1.10.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rs/cors@v1.10.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:L0uuZVXIKlI1SShY2nhFfo44TYvDPQ1w4oFkUJNfhyo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/rs/zerolog@v1.30.0?package-id=7bc215d30de7ca64", + "type": "library", + "name": "github.com/rs/zerolog", + "version": "v1.30.0", + "cpe": "cpe:2.3:a:rs:zerolog:v1.30.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rs/zerolog@v1.30.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:SymVODrcRsaRaSInD9yQtKbtWqwsfoPcRff/oRXLj4c=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/ryanuber/go-glob@v1.0.0?package-id=9fcf4dd457193f5f", + "type": "library", + "name": "github.com/ryanuber/go-glob", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:ryanuber:go-glob:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/ryanuber/go-glob@v1.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ryanuber:go_glob:v1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:iQh3xXAumdQ+4Ufa5b25cRpC5TYKlno6hsv6Cb3pkBk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1?package-id=30bae7799a0df73c", + "type": "library", + "name": "github.com/santhosh-tekuri/jsonschema/v5", + "version": "v5.3.1", + "cpe": "cpe:2.3:a:santhosh-tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:santhosh_tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:santhosh:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lZUw3E0/J3roVtGQ+SCrUrg3ON6NgVqpn3+iol9aGu4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1?package-id=cb4b622763a93227", + "type": "library", + "name": "github.com/santhosh-tekuri/jsonschema/v5", + "version": "v5.3.1", + "cpe": "cpe:2.3:a:santhosh-tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:santhosh_tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:santhosh:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lZUw3E0/J3roVtGQ+SCrUrg3ON6NgVqpn3+iol9aGu4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1?package-id=14d1003496935c58", + "type": "library", + "name": "github.com/santhosh-tekuri/jsonschema/v5", + "version": "v5.3.1", + "cpe": "cpe:2.3:a:santhosh-tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:santhosh_tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:santhosh:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lZUw3E0/J3roVtGQ+SCrUrg3ON6NgVqpn3+iol9aGu4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1?package-id=61b4d7d1bd7596fa", + "type": "library", + "name": "github.com/santhosh-tekuri/jsonschema/v5", + "version": "v5.3.1", + "cpe": "cpe:2.3:a:santhosh-tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:santhosh_tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:santhosh:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lZUw3E0/J3roVtGQ+SCrUrg3ON6NgVqpn3+iol9aGu4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.7.0?package-id=e30dbbfe2f7d9127", + "type": "library", + "name": "github.com/secure-systems-lab/go-securesystemslib", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:OwvJ5jQf9LnIAS83waAjPbcMsODrTQUpJ02eNLUoxBg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.7.0?package-id=5d28c4f8b5874a37", + "type": "library", + "name": "github.com/secure-systems-lab/go-securesystemslib", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:OwvJ5jQf9LnIAS83waAjPbcMsODrTQUpJ02eNLUoxBg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.7.0?package-id=65440a4d463ed747", + "type": "library", + "name": "github.com/secure-systems-lab/go-securesystemslib", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:OwvJ5jQf9LnIAS83waAjPbcMsODrTQUpJ02eNLUoxBg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.7.0?package-id=44fefa4f798e3ff4", + "type": "library", + "name": "github.com/secure-systems-lab/go-securesystemslib", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:OwvJ5jQf9LnIAS83waAjPbcMsODrTQUpJ02eNLUoxBg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/sirupsen/logrus@v1.9.3?package-id=9c4fe3bb3eaed94e", + "type": "library", + "name": "github.com/sirupsen/logrus", + "version": "v1.9.3", + "cpe": "cpe:2.3:a:sirupsen:logrus:v1.9.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/sirupsen/logrus@v1.9.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5?package-id=4f9707df23791c49", + "type": "library", + "name": "github.com/spf13/pflag", + "version": "v1.0.5", + "cpe": "cpe:2.3:a:spf13:pflag:v1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/vbatts/tar-split@v0.11.5?package-id=abcbe5bc10958418", + "type": "library", + "name": "github.com/vbatts/tar-split", + "version": "v0.11.5", + "cpe": "cpe:2.3:a:vbatts:tar-split:v0.11.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/vbatts/tar-split@v0.11.5", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:vbatts:tar_split:v0.11.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:3bHCTIheBm1qFTcgh9oPu+nNBtX+XJIupG/vacinCts=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/zclconf/go-cty@v1.13.3?package-id=ab2fcaf4c7f05613", + "type": "library", + "name": "github.com/zclconf/go-cty", + "version": "v1.13.3", + "cpe": "cpe:2.3:a:zclconf:go-cty:v1.13.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/zclconf/go-cty@v1.13.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:zclconf:go_cty:v1.13.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:m+b9q3YDbg6Bec5rr+KGy1MzEVzY/jC2X+YX4yqKtHI=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.opencensus.io@v0.24.0?package-id=5798e580b022a379", + "type": "library", + "name": "go.opencensus.io", + "version": "v0.24.0", + "purl": "pkg:golang/go.opencensus.io@v0.24.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:y73uSU6J157QMP2kn2r30vwW1A2W2WFwSCGnAVxeaD0=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.uber.org/multierr@v1.11.0?package-id=49e3592a5d3bc0f1", + "type": "library", + "name": "go.uber.org/multierr", + "version": "v1.11.0", + "purl": "pkg:golang/go.uber.org/multierr@v1.11.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.uber.org/multierr@v1.11.0?package-id=e020f537f4dc3ac4", + "type": "library", + "name": "go.uber.org/multierr", + "version": "v1.11.0", + "purl": "pkg:golang/go.uber.org/multierr@v1.11.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.uber.org/multierr@v1.11.0?package-id=8da9eaf215c73644", + "type": "library", + "name": "go.uber.org/multierr", + "version": "v1.11.0", + "purl": "pkg:golang/go.uber.org/multierr@v1.11.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.uber.org/multierr@v1.11.0?package-id=c19498a793ff3d15", + "type": "library", + "name": "go.uber.org/multierr", + "version": "v1.11.0", + "purl": "pkg:golang/go.uber.org/multierr@v1.11.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.uber.org/zap@v1.26.0?package-id=1a7b797e3383faba", + "type": "library", + "name": "go.uber.org/zap", + "version": "v1.26.0", + "purl": "pkg:golang/go.uber.org/zap@v1.26.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:sI7k6L95XOKS281NhVKOFCUNIvv9e0w4BF8N3u+tCRo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.uber.org/zap@v1.26.0?package-id=437fd35517164d16", + "type": "library", + "name": "go.uber.org/zap", + "version": "v1.26.0", + "purl": "pkg:golang/go.uber.org/zap@v1.26.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:sI7k6L95XOKS281NhVKOFCUNIvv9e0w4BF8N3u+tCRo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.uber.org/zap@v1.26.0?package-id=5eafed4baa2ffaf8", + "type": "library", + "name": "go.uber.org/zap", + "version": "v1.26.0", + "purl": "pkg:golang/go.uber.org/zap@v1.26.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:sI7k6L95XOKS281NhVKOFCUNIvv9e0w4BF8N3u+tCRo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.uber.org/zap@v1.26.0?package-id=e488752e056f3f8a", + "type": "library", + "name": "go.uber.org/zap", + "version": "v1.26.0", + "purl": "pkg:golang/go.uber.org/zap@v1.26.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:sI7k6L95XOKS281NhVKOFCUNIvv9e0w4BF8N3u+tCRo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/crypto@v0.14.0?package-id=eda7f8e4c9dba26f", + "type": "library", + "name": "golang.org/x/crypto", + "version": "v0.14.0", + "cpe": "cpe:2.3:a:golang:x\\/crypto:v0.14.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/crypto@v0.14.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:wBqGXzWJW6m1XrIKlAH0Hs1JJ7+9KBwnIO8v66Q9cHc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/crypto@v0.14.0?package-id=4361fc5a46c5738f", + "type": "library", + "name": "golang.org/x/crypto", + "version": "v0.14.0", + "cpe": "cpe:2.3:a:golang:x\\/crypto:v0.14.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/crypto@v0.14.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:wBqGXzWJW6m1XrIKlAH0Hs1JJ7+9KBwnIO8v66Q9cHc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/crypto@v0.14.0?package-id=e231641edf9a9442", + "type": "library", + "name": "golang.org/x/crypto", + "version": "v0.14.0", + "cpe": "cpe:2.3:a:golang:x\\/crypto:v0.14.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/crypto@v0.14.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:wBqGXzWJW6m1XrIKlAH0Hs1JJ7+9KBwnIO8v66Q9cHc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/crypto@v0.14.0?package-id=b108fd094187b044", + "type": "library", + "name": "golang.org/x/crypto", + "version": "v0.14.0", + "cpe": "cpe:2.3:a:golang:x\\/crypto:v0.14.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/crypto@v0.14.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:wBqGXzWJW6m1XrIKlAH0Hs1JJ7+9KBwnIO8v66Q9cHc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/mod@v0.13.0?package-id=66a7289e1e9e3d67", + "type": "library", + "name": "golang.org/x/mod", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/mod:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/mod@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:I/DsJXRlw/8l/0c24sM9yb0T4z9liZTduXvdAWYiysY=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/net@v0.17.0?package-id=171005028177564e", + "type": "library", + "name": "golang.org/x/net", + "version": "v0.17.0", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.17.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.17.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:pVaXccu2ozPjCXewfr1S7xza/zcXTity9cCdXQYSjIM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/net@v0.17.0?package-id=cf640dc590e7e5a2", + "type": "library", + "name": "golang.org/x/net", + "version": "v0.17.0", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.17.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.17.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:pVaXccu2ozPjCXewfr1S7xza/zcXTity9cCdXQYSjIM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/net@v0.17.0?package-id=04b51e3f43166573", + "type": "library", + "name": "golang.org/x/net", + "version": "v0.17.0", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.17.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.17.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:pVaXccu2ozPjCXewfr1S7xza/zcXTity9cCdXQYSjIM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/net@v0.17.0?package-id=3a37828483df8615", + "type": "library", + "name": "golang.org/x/net", + "version": "v0.17.0", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.17.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.17.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:pVaXccu2ozPjCXewfr1S7xza/zcXTity9cCdXQYSjIM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.13.0?package-id=86f3ddbf7ee8622e", + "type": "library", + "name": "golang.org/x/oauth2", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/oauth2:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/oauth2@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jDDenyj+WgFtmV3zYVoi8aE2BwtXFLWOA67ZfNWftiY=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/sync@v0.5.0?package-id=32d4132673364628", + "type": "library", + "name": "golang.org/x/sync", + "version": "v0.5.0", + "cpe": "cpe:2.3:a:golang:x\\/sync:v0.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sync@v0.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:60k92dhOjHxJkrqnwsfl8KuaHbn/5dl0lUPUklKo3qE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/sys@v0.13.0?package-id=a53b10e2f2724d6d", + "type": "library", + "name": "golang.org/x/sys", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Af8nKPmuFypiUBjVoU9V20FiaFXOcuZI21p0ycVYYGE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/sys@v0.13.0?package-id=db43822e2bdf85fb", + "type": "library", + "name": "golang.org/x/sys", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Af8nKPmuFypiUBjVoU9V20FiaFXOcuZI21p0ycVYYGE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/sys@v0.13.0?package-id=47c93b727a329cc0", + "type": "library", + "name": "golang.org/x/sys", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Af8nKPmuFypiUBjVoU9V20FiaFXOcuZI21p0ycVYYGE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/sys@v0.13.0?package-id=15b64f4a9432e8a6", + "type": "library", + "name": "golang.org/x/sys", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Af8nKPmuFypiUBjVoU9V20FiaFXOcuZI21p0ycVYYGE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/text@v0.13.0?package-id=b599bd7087c92e04", + "type": "library", + "name": "golang.org/x/text", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ablQoSUd0tRdKxZewP80B+BaqeKJuVhuRxj/dkrun3k=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/text@v0.13.0?package-id=98b08157ba73ad18", + "type": "library", + "name": "golang.org/x/text", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ablQoSUd0tRdKxZewP80B+BaqeKJuVhuRxj/dkrun3k=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/text@v0.13.0?package-id=5f03397435c9015a", + "type": "library", + "name": "golang.org/x/text", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ablQoSUd0tRdKxZewP80B+BaqeKJuVhuRxj/dkrun3k=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/text@v0.13.0?package-id=5daf43149ec121a7", + "type": "library", + "name": "golang.org/x/text", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ablQoSUd0tRdKxZewP80B+BaqeKJuVhuRxj/dkrun3k=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/time@v0.3.0?package-id=a7cb354e638de0fb", + "type": "library", + "name": "golang.org/x/time", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:golang:x\\/time:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/time@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:rg5rLMjNzMS1RkNLzCG38eapWhnYLFYXDXj2gOlr8j4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/tools@v0.14.0?package-id=572080ba44e11ba2", + "type": "library", + "name": "golang.org/x/tools", + "version": "v0.14.0", + "cpe": "cpe:2.3:a:golang:x\\/tools:v0.14.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/tools@v0.14.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jvNa2pY0M4r62jkRQ6RwEZZyPcymeL9XZMLBbV7U2nc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/xerrors@v0.0.0-20231012003039-104605ab7028?package-id=04bc4e4a2cc1065c", + "type": "library", + "name": "golang.org/x/xerrors", + "version": "v0.0.0-20231012003039-104605ab7028", + "cpe": "cpe:2.3:a:golang:x\\/xerrors:v0.0.0-20231012003039-104605ab7028:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/xerrors@v0.0.0-20231012003039-104605ab7028", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:+cNy6SZtPcJQH3LJVLOSmiC7MMxXNOb3PU/VUEz+EhU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/api@v0.149.0?package-id=07557fdfa606862a", + "type": "library", + "name": "google.golang.org/api", + "version": "v0.149.0", + "cpe": "cpe:2.3:a:google:api:v0.149.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/api@v0.149.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:b2CqT6kG+zqJIVKRQ3ELJVLN1PwHZ6DJ3dW8yl82rgY=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20231016165738-49dd2c1f3d0b?package-id=60dacb54ec4698dc", + "type": "library", + "name": "google.golang.org/genproto", + "version": "v0.0.0-20231016165738-49dd2c1f3d0b", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20231016165738-49dd2c1f3d0b:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20231016165738-49dd2c1f3d0b", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:+YaDE2r2OG8t/z5qmsh7Y+XXwCbvadxxZ0YY6mTdrVA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20231016165738-49dd2c1f3d0b?package-id=d8c733147b2d1a37", + "type": "library", + "name": "google.golang.org/genproto/googleapis/api", + "version": "v0.0.0-20231016165738-49dd2c1f3d0b", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20231016165738-49dd2c1f3d0b:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20231016165738-49dd2c1f3d0b", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:CIC2YMXmIhYw6evmhPxBKJ4fmLbOFtXQN/GV3XOZR8k=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/bytestream@v0.0.0-20231030173426-d783a09b4405?package-id=e08289c2d4e69d7c", + "type": "library", + "name": "google.golang.org/genproto/googleapis/bytestream", + "version": "v0.0.0-20231030173426-d783a09b4405", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20231030173426-d783a09b4405:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto/googleapis/bytestream@v0.0.0-20231030173426-d783a09b4405", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:o4S3HvTUEXgRsNSUQsALDVog0O9F/U1JJlHmmUN8Uas=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20231016165738-49dd2c1f3d0b?package-id=d3cd4f22bc426a63", + "type": "library", + "name": "google.golang.org/genproto/googleapis/rpc", + "version": "v0.0.0-20231016165738-49dd2c1f3d0b", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20231016165738-49dd2c1f3d0b:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20231016165738-49dd2c1f3d0b", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ZlWIi1wSK56/8hn4QcBp/j9M7Gt3U/3hZw3mC7vDICo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20231016165738-49dd2c1f3d0b?package-id=ab6a123f70ceff88", + "type": "library", + "name": "google.golang.org/genproto/googleapis/rpc", + "version": "v0.0.0-20231016165738-49dd2c1f3d0b", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20231016165738-49dd2c1f3d0b:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20231016165738-49dd2c1f3d0b", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ZlWIi1wSK56/8hn4QcBp/j9M7Gt3U/3hZw3mC7vDICo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20231016165738-49dd2c1f3d0b?package-id=ce37abf42415ebd3", + "type": "library", + "name": "google.golang.org/genproto/googleapis/rpc", + "version": "v0.0.0-20231016165738-49dd2c1f3d0b", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20231016165738-49dd2c1f3d0b:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20231016165738-49dd2c1f3d0b", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ZlWIi1wSK56/8hn4QcBp/j9M7Gt3U/3hZw3mC7vDICo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20231016165738-49dd2c1f3d0b?package-id=1508b4bc828958c2", + "type": "library", + "name": "google.golang.org/genproto/googleapis/rpc", + "version": "v0.0.0-20231016165738-49dd2c1f3d0b", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20231016165738-49dd2c1f3d0b:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20231016165738-49dd2c1f3d0b", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ZlWIi1wSK56/8hn4QcBp/j9M7Gt3U/3hZw3mC7vDICo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.59.0?package-id=66d1dc82e849fab3", + "type": "library", + "name": "google.golang.org/grpc", + "version": "v1.59.0", + "cpe": "cpe:2.3:a:google:grpc:v1.59.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.59.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Z5Iec2pjwb+LEOqzpB2MR12/eKFhDPhuqW91O+4bwUk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.59.0?package-id=4113ce1001bab618", + "type": "library", + "name": "google.golang.org/grpc", + "version": "v1.59.0", + "cpe": "cpe:2.3:a:google:grpc:v1.59.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.59.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Z5Iec2pjwb+LEOqzpB2MR12/eKFhDPhuqW91O+4bwUk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.59.0?package-id=c029f81c541558cf", + "type": "library", + "name": "google.golang.org/grpc", + "version": "v1.59.0", + "cpe": "cpe:2.3:a:google:grpc:v1.59.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.59.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Z5Iec2pjwb+LEOqzpB2MR12/eKFhDPhuqW91O+4bwUk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.59.0?package-id=b61af932b9ee28dd", + "type": "library", + "name": "google.golang.org/grpc", + "version": "v1.59.0", + "cpe": "cpe:2.3:a:google:grpc:v1.59.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.59.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Z5Iec2pjwb+LEOqzpB2MR12/eKFhDPhuqW91O+4bwUk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.31.0?package-id=98c95115a554da07", + "type": "library", + "name": "google.golang.org/protobuf", + "version": "v1.31.0", + "cpe": "cpe:2.3:a:google:protobuf:v1.31.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/protobuf@v1.31.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:g0LDEJHgrBl9N9r17Ru3sqWhkIx2NB67okBHPwC7hs8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.31.0?package-id=0e5c9df0cfb2c0d2", + "type": "library", + "name": "google.golang.org/protobuf", + "version": "v1.31.0", + "cpe": "cpe:2.3:a:google:protobuf:v1.31.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/protobuf@v1.31.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:g0LDEJHgrBl9N9r17Ru3sqWhkIx2NB67okBHPwC7hs8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.31.0?package-id=4d2d028fa2cfaa47", + "type": "library", + "name": "google.golang.org/protobuf", + "version": "v1.31.0", + "cpe": "cpe:2.3:a:google:protobuf:v1.31.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/protobuf@v1.31.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:g0LDEJHgrBl9N9r17Ru3sqWhkIx2NB67okBHPwC7hs8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.31.0?package-id=de77881b6c7a5ad3", + "type": "library", + "name": "google.golang.org/protobuf", + "version": "v1.31.0", + "cpe": "cpe:2.3:a:google:protobuf:v1.31.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/protobuf@v1.31.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:g0LDEJHgrBl9N9r17Ru3sqWhkIx2NB67okBHPwC7hs8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=a46b225bc9db9187", + "type": "library", + "name": "gopkg.in/yaml.v3", + "version": "v3.0.1", + "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.28.3?package-id=847f5e32f9b99920", + "type": "library", + "name": "k8s.io/apimachinery", + "version": "v0.28.3", + "purl": "pkg:golang/k8s.io/apimachinery@v0.28.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:B1wYx8txOaCQG0HmYF6nbpU8dg6HvA06x5tEffvOe7A=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20230726121419-3b25d923346b?package-id=ae6dae8bcca124d7", + "type": "library", + "name": "k8s.io/utils", + "version": "v0.0.0-20230726121419-3b25d923346b", + "purl": "pkg:golang/k8s.io/utils@v0.0.0-20230726121419-3b25d923346b", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:sgn3ZU783SCgtaSJjpcVVlRqd6GSnlTLKgpAAttJvpI=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/nhooyr.io/websocket@v1.8.7?package-id=433528d83fddd41d", + "type": "library", + "name": "nhooyr.io/websocket", + "version": "v1.8.7", + "purl": "pkg:golang/nhooyr.io/websocket@v1.8.7", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:usjR2uOr/zjjkVMy0lW+PPohFok7PCow5sDjLgX4P4g=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/stdlib@1.21.5?package-id=a17c60dc0f72aadc", + "type": "library", + "name": "stdlib", + "version": "go1.21.5", + "licenses": [{ "license": { "id": "BSD-3-Clause" } }], + "cpe": "cpe:2.3:a:golang:go:1.21.5:-:*:*:*:*:*:*", + "purl": "pkg:golang/stdlib@1.21.5", + "properties": [ + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" } + ] + }, + { + "bom-ref": "pkg:golang/stdlib@1.21.5?package-id=ecd2105513157ff0", + "type": "library", + "name": "stdlib", + "version": "go1.21.5", + "licenses": [{ "license": { "id": "BSD-3-Clause" } }], + "cpe": "cpe:2.3:a:golang:go:1.21.5:-:*:*:*:*:*:*", + "purl": "pkg:golang/stdlib@1.21.5", + "properties": [ + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" } + ] + }, + { + "bom-ref": "pkg:golang/stdlib@1.21.5?package-id=1847545f699d9f52", + "type": "library", + "name": "stdlib", + "version": "go1.21.5", + "licenses": [{ "license": { "id": "BSD-3-Clause" } }], + "cpe": "cpe:2.3:a:golang:go:1.21.5:-:*:*:*:*:*:*", + "purl": "pkg:golang/stdlib@1.21.5", + "properties": [ + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" } + ] + }, + { + "bom-ref": "pkg:golang/stdlib@1.21.5?package-id=f3fe83501937440f", + "type": "library", + "name": "stdlib", + "version": "go1.21.5", + "licenses": [{ "license": { "id": "BSD-3-Clause" } }], + "cpe": "cpe:2.3:a:golang:go:1.21.5:-:*:*:*:*:*:*", + "purl": "pkg:golang/stdlib@1.21.5", + "properties": [ + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" } + ] + } + ], + "vulnerabilities": [ + { + "id": "CVE-2025-4949", + "ratings": [ + { + "score": 9.8, + "severity": "critical", + "method": "CVSSv31", + "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "cwes": null, + "description": "In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol allowing to store git pack files in an Amazon S3 bucket, are vulnerable to XML External Entity (XXE) attacks when parsing XML files. This vulnerability can lead to information disclosure, denial of service, and other security issues.", + "analysis": { + "state": "in_triage", + "detail": "There are no applicability scanners for this specific CVE" + }, + "affects": [ + { + "ref": "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.10.0.202406032230-r" + } + ] + } + ] +} diff --git a/pkg/attestation/crafter/materials/testdata/sbom.cyclonedx-1.5-vulnerabilities.json b/pkg/attestation/crafter/materials/testdata/sbom.cyclonedx-1.5-vulnerabilities.json new file mode 100644 index 000000000..7782ced31 --- /dev/null +++ b/pkg/attestation/crafter/materials/testdata/sbom.cyclonedx-1.5-vulnerabilities.json @@ -0,0 +1,9888 @@ +{ + "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json", + "bomFormat": "CycloneDX", + "specVersion": "1.5", + "serialNumber": "urn:uuid:fb656b68-ebe4-42a9-bd76-ac382b0e6752", + "version": 1, + "metadata": { + "timestamp": "2024-01-27T22:30:07+01:00", + "tools": { + "components": [ + { + "type": "application", + "author": "anchore", + "name": "syft", + "version": "0.101.1" + } + ] + }, + "component": { + "bom-ref": "d5a681ad9af7217d", + "type": "container", + "name": "ghcr.io/chainloop-dev/chainloop/control-plane", + "version": "v0.55.0" + } + }, + "components": [ + { + "bom-ref": "pkg:golang/ariga.io/atlas@v0.13.3?package-id=b414da9862878694", + "type": "library", + "name": "ariga.io/atlas", + "version": "v0.13.3", + "purl": "pkg:golang/ariga.io/atlas@v0.13.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:L6Zz/0/yo86flQclZwIqJEKrHoJxQOkj3Z2JPvzZEHE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/cloud.google.com/go@v0.110.9?package-id=f1b15d44b80e8c02", + "type": "library", + "name": "cloud.google.com/go", + "version": "v0.110.9", + "purl": "pkg:golang/cloud.google.com/go@v0.110.9", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:e7ITSqGFFk4rbz/JFIqZh3G4VEHguhAL4BQcFlWtU68=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/cloud.google.com/go/compute/metadata@v0.2.3?package-id=f59e99a33aefe15e", + "type": "library", + "name": "cloud.google.com/go/compute/metadata", + "version": "v0.2.3", + "cpe": "cpe:2.3:a:go:compute\\/metadata:v0.2.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/cloud.google.com/go/compute/metadata@v0.2.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:mg4jlk7mCAj6xXp9UJ4fjI9VUI5rubuGBW5aJ7UnBMY=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/cloud.google.com/go/iam@v1.1.4?package-id=e60f021b78ad279b", + "type": "library", + "name": "cloud.google.com/go/iam", + "version": "v1.1.4", + "cpe": "cpe:2.3:a:go:iam:v1.1.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/cloud.google.com/go/iam@v1.1.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:K6n/GZHFTtEoKT5aUG3l9diPi0VduZNQ1PfdnpkkIFk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/cloud.google.com/go/secretmanager@v1.11.2?package-id=581613de2374e3ed", + "type": "library", + "name": "cloud.google.com/go/secretmanager", + "version": "v1.11.2", + "cpe": "cpe:2.3:a:go:secretmanager:v1.11.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/cloud.google.com/go/secretmanager@v1.11.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:52Z78hH8NBWIqbvIG0wi0EoTaAmSx99KIOAmDXIlX0M=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/cloud.google.com/go/storage@v1.33.0?package-id=802630e9fab2edb3", + "type": "library", + "name": "cloud.google.com/go/storage", + "version": "v1.33.0", + "cpe": "cpe:2.3:a:go:storage:v1.33.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/cloud.google.com/go/storage@v1.33.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:PVrDOkIC8qQVa1P3SXGpQvfuJhN2LHOoyZvWs8D2X5M=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/code.cloudfoundry.org/bytefmt@v0.0.0-20230612151507-41ef4d1f67a4?package-id=b648a64660a16dbf", + "type": "library", + "name": "code.cloudfoundry.org/bytefmt", + "version": "v0.0.0-20230612151507-41ef4d1f67a4", + "purl": "pkg:golang/code.cloudfoundry.org/bytefmt@v0.0.0-20230612151507-41ef4d1f67a4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:9G5F8zgma5v0GdDvNz6iZwwJp3RS/z0SY/aHGfVwvTo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/entgo.io/ent@v0.12.3?package-id=731ef001f91324c5", + "type": "library", + "name": "entgo.io/ent", + "version": "v0.12.3", + "purl": "pkg:golang/entgo.io/ent@v0.12.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:N5lO2EOrHpCH5HYfiMOCHYbo+oh5M8GjT0/cx5x6xkk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azcore@v1.8.0?package-id=beb3d4bf5c25dbb6", + "type": "library", + "name": "github.com/Azure/azure-sdk-for-go/sdk/azcore", + "version": "v1.8.0", + "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/azcore:v1.8.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azcore@v1.8.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/azcore:v1.8.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:9kDVnTz3vbfweTqAUmk/a/pH5pWFCHtvRpHYC0G/dcA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/azidentity@v1.4.0?package-id=09127dcba1cb1e06", + "type": "library", + "name": "github.com/Azure/azure-sdk-for-go/sdk/azidentity", + "version": "v1.4.0", + "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/azidentity:v1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/azidentity:v1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:BMAjVKJM0U/CYF27gA0ZMmXGkOcvfFtD0oHVZ1TIPRI=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/internal@v1.4.0?package-id=65920e48a72c24c0", + "type": "library", + "name": "github.com/Azure/azure-sdk-for-go/sdk/internal", + "version": "v1.4.0", + "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/internal:v1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/internal@v1.4.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/internal:v1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:TuEMD+E+1aTjjLICGQOW6vLe8UWES7kopac9mUXL56Y=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/keyvault/azsecrets@v0.12.0?package-id=18d7aa4be0e2bf4f", + "type": "library", + "name": "github.com/Azure/azure-sdk-for-go/sdk/keyvault/azsecrets", + "version": "v0.12.0", + "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/keyvault\\/azsecrets:v0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/keyvault/azsecrets@v0.12.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/keyvault\\/azsecrets:v0.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:xnO4sFyG8UH2fElBkcqLTOZsAajvKfnSlgBBW8dXYjw=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/keyvault/internal@v0.7.1?package-id=462d93d2a7eab7a3", + "type": "library", + "name": "github.com/Azure/azure-sdk-for-go/sdk/keyvault/internal", + "version": "v0.7.1", + "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/keyvault\\/internal:v0.7.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/keyvault/internal@v0.7.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/keyvault\\/internal:v0.7.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:FbH3BbSb4bvGluTesZZ+ttN/MDsnMmQP36OSnDuSXqw=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/azure/azure-sdk-for-go/sdk/storage/azblob@v1.1.0?package-id=9af35c560b176ff1", + "type": "library", + "name": "github.com/Azure/azure-sdk-for-go/sdk/storage/azblob", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:Azure:azure-sdk-for-go\\/sdk\\/storage\\/azblob:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob@v1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:Azure:azure_sdk_for_go\\/sdk\\/storage\\/azblob:v1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:nVocQV40OQne5613EeLayJiRAJuKlBGy+m22qWG+WRg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/azuread/microsoft-authentication-library-for-go@v1.2.0?package-id=b09096b981626896", + "type": "library", + "name": "github.com/AzureAD/microsoft-authentication-library-for-go", + "version": "v1.2.0", + "cpe": "cpe:2.3:a:AzureAD:microsoft-authentication-library-for-go:v1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/AzureAD/microsoft-authentication-library-for-go@v1.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:AzureAD:microsoft_authentication_library_for_go:v1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:hVeq+yCyUi+MsoO/CU95yqCIcdzra5ovzk8Q2BBpV2M=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/agext/levenshtein@v1.2.3?package-id=351e9e8ae46f4d59", + "type": "library", + "name": "github.com/agext/levenshtein", + "version": "v1.2.3", + "cpe": "cpe:2.3:a:agext:levenshtein:v1.2.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/agext/levenshtein@v1.2.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:YB2fHEn0UJagG8T1rrWknE3ZQzWM06O8AMAatNn7lmo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/apparentlymart/go-textseg/v13@v13.0.0?package-id=f81479e62ecc939c", + "type": "library", + "name": "github.com/apparentlymart/go-textseg/v13", + "version": "v13.0.0", + "cpe": "cpe:2.3:a:apparentlymart:go-textseg\\/v13:v13.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/apparentlymart/go-textseg/v13@v13.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:apparentlymart:go_textseg\\/v13:v13.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Y+KvPE1NYz0xl601PVImeQfFyEy6iT90AvPUL1NNfNw=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go@v1.47.0?package-id=d1865182c8f4c818", + "type": "library", + "name": "github.com/aws/aws-sdk-go", + "version": "v1.47.0", + "cpe": "cpe:2.3:a:aws:aws-sdk-go:v1.47.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go@v1.47.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go:v1.47.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:/JUg9V1+xh+qBn8A6ec/l15ETPaMaBqxkjz+gg63dNk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.21.2?package-id=52cbf77ae1c766a1", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2", + "version": "v1.21.2", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2:v1.21.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.21.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2:v1.21.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:+LXZ0sgo8quN9UOKXXzAWRT3FWd4NxeXWOZom9pE7GA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.19.1?package-id=8d6adfa7465f43b0", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/config", + "version": "v1.19.1", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/config:v1.19.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.19.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/config:v1.19.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:oe3vqcGftyk40icfLymhhhNysAwk0NfiwkDi2GTPMXs=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.13.43?package-id=0d6ff47d52f4974c", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/credentials", + "version": "v1.13.43", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/credentials:v1.13.43:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.13.43", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/credentials:v1.13.43:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:LU8vo40zBlo3R7bAvBVy/ku4nxGEyZe9N8MqAeFTzF8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.13.13?package-id=6254035ab4aa5858", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds", + "version": "v1.13.13", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/feature\\/ec2\\/imds:v1.13.13:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.13.13", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/feature\\/ec2\\/imds:v1.13.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:PIktER+hwIG286DqXyvVENjgLTAwGgoeriLDD5C+YlQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.1.43?package-id=8b902afc3f9e4a2b", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/internal/configsources", + "version": "v1.1.43", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/configsources:v1.1.43:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.1.43", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/configsources:v1.1.43:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:nFBQlGtkbPzp/NjZLuFxRqmT91rLJkgvsEQs68h962Y=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.4.37?package-id=8c8da101453c77d5", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2", + "version": "v2.4.37", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/endpoints\\/v2:v2.4.37:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.4.37", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/endpoints\\/v2:v2.4.37:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:JRVhO25+r3ar2mKGP7E0LDl8K9/G36gjlqca5iQbaqc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/ini@v1.3.45?package-id=59fe0f29ee75ed85", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/internal/ini", + "version": "v1.3.45", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/internal\\/ini:v1.3.45:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/ini@v1.3.45", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/internal\\/ini:v1.3.45:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:hze8YsjSh8Wl1rYa1CJpRmXP21BvOBuc76YhW0HsuQ4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.9.37?package-id=1972d8eedb279e71", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url", + "version": "v1.9.37", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/internal\\/presigned-url:v1.9.37:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.9.37", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/internal\\/presigned_url:v1.9.37:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:WWZA/I2K4ptBS1kg0kV1JbBtG/umed0vwHRrmcr9z7k=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/secretsmanager@v1.21.3?package-id=ee882e1ce7417f1e", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/service/secretsmanager", + "version": "v1.21.3", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/secretsmanager:v1.21.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/secretsmanager@v1.21.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/secretsmanager:v1.21.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:H6ZipEknzu7RkJW3w2PP75zd8XOdR35AEY5D57YrJtA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.15.2?package-id=18c033191679d9af", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/service/sso", + "version": "v1.15.2", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sso:v1.15.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.15.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sso:v1.15.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:JuPGc7IkOP4AaqcZSIcyqLpFSqBWK32rM9+a1g6u73k=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.17.3?package-id=cc3c13a86464dc63", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc", + "version": "v1.17.3", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/ssooidc:v1.17.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.17.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/ssooidc:v1.17.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:HFiiRkf1SdaAmV3/BHOFZ9DjFynPHj8G/UIO1lQS+fk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.23.2?package-id=6bb2deffbee3aff2", + "type": "library", + "name": "github.com/aws/aws-sdk-go-v2/service/sts", + "version": "v1.23.2", + "cpe": "cpe:2.3:a:aws:aws-sdk-go-v2\\/service\\/sts:v1.23.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.23.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:aws_sdk_go_v2\\/service\\/sts:v1.23.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:0BkLfgeDjfZnZ+MhB3ONb01u9pwFYTCZVhlsSSBvlbU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/aws/smithy-go@v1.15.0?package-id=a1100dd62eb906f0", + "type": "library", + "name": "github.com/aws/smithy-go", + "version": "v1.15.0", + "cpe": "cpe:2.3:a:aws:smithy-go:v1.15.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/aws/smithy-go@v1.15.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:aws:smithy_go:v1.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:PS/durmlzvAFpQHDs4wi4sNNP9ExsqZh6IlfdHXgKK8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/beorn7/perks@v1.0.1?package-id=327be739604254dd", + "type": "library", + "name": "github.com/beorn7/perks", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:beorn7:perks:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/beorn7/perks@v1.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/cenkalti/backoff/v3@v3.2.2?package-id=93b712f8cc226f1f", + "type": "library", + "name": "github.com/cenkalti/backoff/v3", + "version": "v3.2.2", + "cpe": "cpe:2.3:a:cenkalti:backoff\\/v3:v3.2.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cenkalti/backoff/v3@v3.2.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:cfUAAO3yvKMYKPrvhDuHSwQnhZNk/RMHKdZqKTxfm6M=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/cenkalti/backoff/v4@v4.2.1?package-id=b165e48d3d9dfc49", + "type": "library", + "name": "github.com/cenkalti/backoff/v4", + "version": "v4.2.1", + "cpe": "cpe:2.3:a:cenkalti:backoff\\/v4:v4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cenkalti/backoff/v4@v4.2.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:y4OZtCnogmCPw98Zjyt5a6+QwPLGkiQsYW5oUqylYbM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/cespare/xxhash/v2@v2.2.0?package-id=654db79c2d438302", + "type": "library", + "name": "github.com/cespare/xxhash/v2", + "version": "v2.2.0", + "cpe": "cpe:2.3:a:cespare:xxhash\\/v2:v2.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:DC2CZ1Ep5Y4k3ZQ899DldepgrayRUGE6BBZ/cd9Cj44=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/chainloop-dev/chainloop@v0.0.0-20231218210522-9bb03950e7fd?package-id=ec2f46e6ca039cc1", + "type": "library", + "name": "github.com/chainloop-dev/chainloop", + "version": "v0.0.0-20231218210522-9bb03950e7fd", + "cpe": "cpe:2.3:a:chainloop-dev:chainloop:v0.0.0-20231218210522-9bb03950e7fd:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/chainloop-dev/chainloop@v0.0.0-20231218210522-9bb03950e7fd", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:chainloop_dev:chainloop:v0.0.0-20231218210522-9bb03950e7fd:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:chainloop:chainloop:v0.0.0-20231218210522-9bb03950e7fd:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goBuildSettings:-buildmode", "value": "exe" }, + { "name": "syft:metadata:goBuildSettings:-compiler", "value": "gc" }, + { "name": "syft:metadata:goBuildSettings:-ldflags", "value": "-s -w" }, + { "name": "syft:metadata:goBuildSettings:CGO_ENABLED", "value": "0" }, + { "name": "syft:metadata:goBuildSettings:GOAMD64", "value": "v1" }, + { "name": "syft:metadata:goBuildSettings:GOARCH", "value": "amd64" }, + { "name": "syft:metadata:goBuildSettings:GOOS", "value": "linux" }, + { "name": "syft:metadata:goBuildSettings:vcs", "value": "git" }, + { + "name": "syft:metadata:goBuildSettings:vcs.modified", + "value": "false" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.revision", + "value": "9bb03950e7fd03a573c87188aee4b9a1ff62cfcf" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.time", + "value": "2023-12-18T21:05:22Z" + }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/chainloop-dev/chainloop@v0.0.0-20231218210522-9bb03950e7fd?package-id=bba8123539840bcd", + "type": "library", + "name": "github.com/chainloop-dev/chainloop", + "version": "v0.0.0-20231218210522-9bb03950e7fd", + "cpe": "cpe:2.3:a:chainloop-dev:chainloop:v0.0.0-20231218210522-9bb03950e7fd:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/chainloop-dev/chainloop@v0.0.0-20231218210522-9bb03950e7fd", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:chainloop_dev:chainloop:v0.0.0-20231218210522-9bb03950e7fd:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:chainloop:chainloop:v0.0.0-20231218210522-9bb03950e7fd:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goBuildSettings:-buildmode", "value": "exe" }, + { "name": "syft:metadata:goBuildSettings:-compiler", "value": "gc" }, + { "name": "syft:metadata:goBuildSettings:-ldflags", "value": "-s -w" }, + { "name": "syft:metadata:goBuildSettings:CGO_ENABLED", "value": "0" }, + { "name": "syft:metadata:goBuildSettings:GOAMD64", "value": "v1" }, + { "name": "syft:metadata:goBuildSettings:GOARCH", "value": "amd64" }, + { "name": "syft:metadata:goBuildSettings:GOOS", "value": "linux" }, + { "name": "syft:metadata:goBuildSettings:vcs", "value": "git" }, + { + "name": "syft:metadata:goBuildSettings:vcs.modified", + "value": "false" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.revision", + "value": "9bb03950e7fd03a573c87188aee4b9a1ff62cfcf" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.time", + "value": "2023-12-18T21:05:22Z" + }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/chainloop-dev/chainloop@v0.55.0?package-id=658c820d400c1e97", + "type": "library", + "name": "github.com/chainloop-dev/chainloop", + "version": "v0.55.0", + "cpe": "cpe:2.3:a:chainloop-dev:chainloop:v0.55.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/chainloop-dev/chainloop@v0.55.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:chainloop_dev:chainloop:v0.55.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:chainloop:chainloop:v0.55.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goBuildSettings:-buildmode", "value": "exe" }, + { "name": "syft:metadata:goBuildSettings:-compiler", "value": "gc" }, + { + "name": "syft:metadata:goBuildSettings:-ldflags", + "value": "-s -w -X github.com/chainloop-dev/chainloop/app/controlplane/internal/server.Version=0.55.0 -X main.Version=0.55.0" + }, + { "name": "syft:metadata:goBuildSettings:CGO_ENABLED", "value": "0" }, + { "name": "syft:metadata:goBuildSettings:GOAMD64", "value": "v1" }, + { "name": "syft:metadata:goBuildSettings:GOARCH", "value": "amd64" }, + { "name": "syft:metadata:goBuildSettings:GOOS", "value": "linux" }, + { "name": "syft:metadata:goBuildSettings:vcs", "value": "git" }, + { + "name": "syft:metadata:goBuildSettings:vcs.modified", + "value": "false" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.revision", + "value": "9bb03950e7fd03a573c87188aee4b9a1ff62cfcf" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.time", + "value": "2023-12-18T21:05:22Z" + }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/chainloop-dev/chainloop@v0.55.0?package-id=7db74d861b21eacb", + "type": "library", + "name": "github.com/chainloop-dev/chainloop", + "version": "v0.55.0", + "cpe": "cpe:2.3:a:chainloop-dev:chainloop:v0.55.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/chainloop-dev/chainloop@v0.55.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:chainloop_dev:chainloop:v0.55.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:chainloop:chainloop:v0.55.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goBuildSettings:-buildmode", "value": "exe" }, + { "name": "syft:metadata:goBuildSettings:-compiler", "value": "gc" }, + { + "name": "syft:metadata:goBuildSettings:-ldflags", + "value": "-s -w -X main.version=0.55.0 -X main.commit=9bb03950e7fd03a573c87188aee4b9a1ff62cfcf -X main.date=2023-12-18T21:24:33Z -X main.builtBy=goreleaser" + }, + { "name": "syft:metadata:goBuildSettings:CGO_ENABLED", "value": "0" }, + { "name": "syft:metadata:goBuildSettings:GOAMD64", "value": "v1" }, + { "name": "syft:metadata:goBuildSettings:GOARCH", "value": "amd64" }, + { "name": "syft:metadata:goBuildSettings:GOOS", "value": "linux" }, + { "name": "syft:metadata:goBuildSettings:vcs", "value": "git" }, + { + "name": "syft:metadata:goBuildSettings:vcs.modified", + "value": "false" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.revision", + "value": "9bb03950e7fd03a573c87188aee4b9a1ff62cfcf" + }, + { + "name": "syft:metadata:goBuildSettings:vcs.time", + "value": "2023-12-18T21:05:22Z" + }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/containerd/stargz-snapshotter/estargz@v0.14.3?package-id=686a6e4236aeef74", + "type": "library", + "name": "github.com/containerd/stargz-snapshotter/estargz", + "version": "v0.14.3", + "cpe": "cpe:2.3:a:containerd:stargz-snapshotter\\/estargz:v0.14.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/containerd/stargz-snapshotter/estargz@v0.14.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:containerd:stargz_snapshotter\\/estargz:v0.14.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:OqlDCK3ZVUO6C3B/5FSkDwbkEETK84kQgEeFwDC+62k=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/coreos/go-oidc/v3@v3.7.0?package-id=5bb29796dc8f458e", + "type": "library", + "name": "github.com/coreos/go-oidc/v3", + "version": "v3.7.0", + "cpe": "cpe:2.3:a:coreos:go-oidc\\/v3:v3.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/coreos/go-oidc/v3@v3.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:coreos:go_oidc\\/v3:v3.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:FTdj0uexT4diYIPlF4yoFVI5MRO1r5+SEcIpEw9vC0o=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/desertbit/timer@v0.0.0-20180107155436-c41aec40b27f?package-id=c9a5cb36fa0626ec", + "type": "library", + "name": "github.com/desertbit/timer", + "version": "v0.0.0-20180107155436-c41aec40b27f", + "cpe": "cpe:2.3:a:desertbit:timer:v0.0.0-20180107155436-c41aec40b27f:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/desertbit/timer@v0.0.0-20180107155436-c41aec40b27f", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:U5y3Y5UE0w7amNe7Z5G/twsBW0KEalRQXZzf8ufSh9I=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/docker/cli@v24.0.7+incompatible?package-id=27567a769e8bef0e", + "type": "library", + "name": "github.com/docker/cli", + "version": "v24.0.7+incompatible", + "cpe": "cpe:2.3:a:docker:cli:v24.0.7\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/cli@v24.0.7+incompatible", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:wa/nIwYFW7BVTGa7SWPVyyXU9lgORqUb1xfI36MSkFg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/docker/distribution@v2.8.3+incompatible?package-id=f0e79f93f1b9fe1f", + "type": "library", + "name": "github.com/docker/distribution", + "version": "v2.8.3+incompatible", + "cpe": "cpe:2.3:a:docker:distribution:v2.8.3\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/distribution@v2.8.3+incompatible", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/docker/docker@v24.0.7+incompatible?package-id=45e3c997c454b1c1", + "type": "library", + "name": "github.com/docker/docker", + "version": "v24.0.7+incompatible", + "cpe": "cpe:2.3:a:docker:docker:v24.0.7\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/docker@v24.0.7+incompatible", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Wo6l37AuwP3JaMnZa226lzVXGA3F9Ig1seQen0cKYlM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/docker/docker-credential-helpers@v0.8.0?package-id=716819da3ff9bbca", + "type": "library", + "name": "github.com/docker/docker-credential-helpers", + "version": "v0.8.0", + "cpe": "cpe:2.3:a:docker:docker-credential-helpers:v0.8.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/docker/docker-credential-helpers@v0.8.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:docker:docker_credential_helpers:v0.8.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:YQFtbBQb4VrpoPxhFuzEBPQ9E16qz5SpHLS+uswaCp8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.0.2?package-id=dff9652cb0c24c53", + "type": "library", + "name": "github.com/envoyproxy/protoc-gen-validate", + "version": "v1.0.2", + "cpe": "cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.0.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:QkIBuU5k+x7/QXPvPPnWXWlCdaBFApVqftFV6k087DA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.0.2?package-id=6d106bfcdcd909d7", + "type": "library", + "name": "github.com/envoyproxy/protoc-gen-validate", + "version": "v1.0.2", + "cpe": "cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.0.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:QkIBuU5k+x7/QXPvPPnWXWlCdaBFApVqftFV6k087DA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.0.2?package-id=4582534ffd87d01b", + "type": "library", + "name": "github.com/envoyproxy/protoc-gen-validate", + "version": "v1.0.2", + "cpe": "cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.0.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:QkIBuU5k+x7/QXPvPPnWXWlCdaBFApVqftFV6k087DA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.0.2?package-id=3f04e019b826b5b3", + "type": "library", + "name": "github.com/envoyproxy/protoc-gen-validate", + "version": "v1.0.2", + "cpe": "cpe:2.3:a:envoyproxy:protoc-gen-validate:v1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.0.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:envoyproxy:protoc_gen_validate:v1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:QkIBuU5k+x7/QXPvPPnWXWlCdaBFApVqftFV6k087DA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/fatih/color@v1.15.0?package-id=b4a4fbb00937b4eb", + "type": "library", + "name": "github.com/fatih/color", + "version": "v1.15.0", + "cpe": "cpe:2.3:a:fatih:color:v1.15.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/fatih/color@v1.15.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:kOqh6YHBtK8aywxGerMG2Eq3H6Qgoqeo13Bk2Mv/nBs=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/fatih/color@v1.15.0?package-id=ec28771208351a6b", + "type": "library", + "name": "github.com/fatih/color", + "version": "v1.15.0", + "cpe": "cpe:2.3:a:fatih:color:v1.15.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/fatih/color@v1.15.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:kOqh6YHBtK8aywxGerMG2Eq3H6Qgoqeo13Bk2Mv/nBs=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/fatih/color@v1.15.0?package-id=90635408505c2cab", + "type": "library", + "name": "github.com/fatih/color", + "version": "v1.15.0", + "cpe": "cpe:2.3:a:fatih:color:v1.15.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/fatih/color@v1.15.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:kOqh6YHBtK8aywxGerMG2Eq3H6Qgoqeo13Bk2Mv/nBs=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/fatih/color@v1.15.0?package-id=41c4e853b593bb0d", + "type": "library", + "name": "github.com/fatih/color", + "version": "v1.15.0", + "cpe": "cpe:2.3:a:fatih:color:v1.15.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/fatih/color@v1.15.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:kOqh6YHBtK8aywxGerMG2Eq3H6Qgoqeo13Bk2Mv/nBs=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/fsnotify/fsnotify@v1.7.0?package-id=728a0556ce5c791a", + "type": "library", + "name": "github.com/fsnotify/fsnotify", + "version": "v1.7.0", + "cpe": "cpe:2.3:a:fsnotify:fsnotify:v1.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/fsnotify/fsnotify@v1.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:8JEhPFa5W2WU7YfeZzPNqzMP6Lwt7L2715Ggo0nosvA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/getsentry/sentry-go@v0.23.0?package-id=045e7909541edee5", + "type": "library", + "name": "github.com/getsentry/sentry-go", + "version": "v0.23.0", + "cpe": "cpe:2.3:a:getsentry:sentry-go:v0.23.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/getsentry/sentry-go@v0.23.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:getsentry:sentry_go:v0.23.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:dn+QRCeJv4pPt9OjVXiMcGIBIefaTJPw/h0bZWO05nE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/getsentry/sentry-go@v0.23.0?package-id=1528a74c2603af86", + "type": "library", + "name": "github.com/getsentry/sentry-go", + "version": "v0.23.0", + "cpe": "cpe:2.3:a:getsentry:sentry-go:v0.23.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/getsentry/sentry-go@v0.23.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:getsentry:sentry_go:v0.23.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:dn+QRCeJv4pPt9OjVXiMcGIBIefaTJPw/h0bZWO05nE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/getsentry/sentry-go@v0.23.0?package-id=b88984efc814bd49", + "type": "library", + "name": "github.com/getsentry/sentry-go", + "version": "v0.23.0", + "cpe": "cpe:2.3:a:getsentry:sentry-go:v0.23.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/getsentry/sentry-go@v0.23.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:getsentry:sentry_go:v0.23.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:dn+QRCeJv4pPt9OjVXiMcGIBIefaTJPw/h0bZWO05nE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/getsentry/sentry-go@v0.23.0?package-id=2db7db0fa20f3600", + "type": "library", + "name": "github.com/getsentry/sentry-go", + "version": "v0.23.0", + "cpe": "cpe:2.3:a:getsentry:sentry-go:v0.23.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/getsentry/sentry-go@v0.23.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:getsentry:sentry_go:v0.23.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:dn+QRCeJv4pPt9OjVXiMcGIBIefaTJPw/h0bZWO05nE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-jose/go-jose/v3@v3.0.1?package-id=d485b08b10e24583", + "type": "library", + "name": "github.com/go-jose/go-jose/v3", + "version": "v3.0.1", + "cpe": "cpe:2.3:a:go-jose:go-jose\\/v3:v3.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-jose/go-jose/v3@v3.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go-jose:go_jose\\/v3:v3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_jose:go-jose\\/v3:v3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_jose:go_jose\\/v3:v3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:go-jose\\/v3:v3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:go_jose\\/v3:v3.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:pWmKFVtt+Jl0vBZTIpz/eAKwsm6LkIxDVVbFHKkchhA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/aegis@v0.2.0?package-id=8e1f2f97b7df4c28", + "type": "library", + "name": "github.com/go-kratos/aegis", + "version": "v0.2.0", + "cpe": "cpe:2.3:a:go-kratos:aegis:v0.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/aegis@v0.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:aegis:v0.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:aegis:v0.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:dObzCDWn3XVjUkgxyBp6ZeWtx/do0DPZ7LY3yNSJLUQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/kratos/contrib/log/zap/v2@v2.0.0-20230823024326-a09f4d8ebba9?package-id=4728d79f8c8db4f3", + "type": "library", + "name": "github.com/go-kratos/kratos/contrib/log/zap/v2", + "version": "v2.0.0-20230823024326-a09f4d8ebba9", + "cpe": "cpe:2.3:a:go-kratos:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/kratos/contrib/log/zap/v2@v2.0.0-20230823024326-a09f4d8ebba9", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:j7EHWoqShY20lGhhC1j6v6QkftAqLCBUCHGwDkHL8pU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/kratos/contrib/log/zap/v2@v2.0.0-20230823024326-a09f4d8ebba9?package-id=317beedf635a585a", + "type": "library", + "name": "github.com/go-kratos/kratos/contrib/log/zap/v2", + "version": "v2.0.0-20230823024326-a09f4d8ebba9", + "cpe": "cpe:2.3:a:go-kratos:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/kratos/contrib/log/zap/v2@v2.0.0-20230823024326-a09f4d8ebba9", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:j7EHWoqShY20lGhhC1j6v6QkftAqLCBUCHGwDkHL8pU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/kratos/contrib/log/zap/v2@v2.0.0-20230823024326-a09f4d8ebba9?package-id=7be84dcec7261290", + "type": "library", + "name": "github.com/go-kratos/kratos/contrib/log/zap/v2", + "version": "v2.0.0-20230823024326-a09f4d8ebba9", + "cpe": "cpe:2.3:a:go-kratos:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/kratos/contrib/log/zap/v2@v2.0.0-20230823024326-a09f4d8ebba9", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:j7EHWoqShY20lGhhC1j6v6QkftAqLCBUCHGwDkHL8pU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/kratos/contrib/log/zap/v2@v2.0.0-20230823024326-a09f4d8ebba9?package-id=043b573391ef401c", + "type": "library", + "name": "github.com/go-kratos/kratos/contrib/log/zap/v2", + "version": "v2.0.0-20230823024326-a09f4d8ebba9", + "cpe": "cpe:2.3:a:go-kratos:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/kratos/contrib/log/zap/v2@v2.0.0-20230823024326-a09f4d8ebba9", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:kratos\\/contrib\\/log\\/zap\\/v2:v2.0.0-20230823024326-a09f4d8ebba9:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:j7EHWoqShY20lGhhC1j6v6QkftAqLCBUCHGwDkHL8pU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/kratos/v2@v2.7.0?package-id=4090a6172f98e169", + "type": "library", + "name": "github.com/go-kratos/kratos/v2", + "version": "v2.7.0", + "cpe": "cpe:2.3:a:go-kratos:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/kratos/v2@v2.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:9DaVgU9YoHPb/BxDVqeVlVCMduRhiSewG3xE+e9ZAZ8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/kratos/v2@v2.7.0?package-id=ae839db7f88fe67d", + "type": "library", + "name": "github.com/go-kratos/kratos/v2", + "version": "v2.7.0", + "cpe": "cpe:2.3:a:go-kratos:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/kratos/v2@v2.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:9DaVgU9YoHPb/BxDVqeVlVCMduRhiSewG3xE+e9ZAZ8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/kratos/v2@v2.7.0?package-id=a5b157e0f92ec487", + "type": "library", + "name": "github.com/go-kratos/kratos/v2", + "version": "v2.7.0", + "cpe": "cpe:2.3:a:go-kratos:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/kratos/v2@v2.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:9DaVgU9YoHPb/BxDVqeVlVCMduRhiSewG3xE+e9ZAZ8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-kratos/kratos/v2@v2.7.0?package-id=e450502a3a4aa668", + "type": "library", + "name": "github.com/go-kratos/kratos/v2", + "version": "v2.7.0", + "cpe": "cpe:2.3:a:go-kratos:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-kratos/kratos/v2@v2.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_kratos:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:kratos\\/v2:v2.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:9DaVgU9YoHPb/BxDVqeVlVCMduRhiSewG3xE+e9ZAZ8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-openapi/inflect@v0.19.0?package-id=289a2f1dfd0d68b5", + "type": "library", + "name": "github.com/go-openapi/inflect", + "version": "v0.19.0", + "cpe": "cpe:2.3:a:go-openapi:inflect:v0.19.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-openapi/inflect@v0.19.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_openapi:inflect:v0.19.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:inflect:v0.19.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:9jCH9scKIbHeV9m12SmPilScz6krDxKRasNNSNPXu/4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/go-playground/form/v4@v4.2.1?package-id=58aa8de83c451d13", + "type": "library", + "name": "github.com/go-playground/form/v4", + "version": "v4.2.1", + "cpe": "cpe:2.3:a:go-playground:form\\/v4:v4.2.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/go-playground/form/v4@v4.2.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go_playground:form\\/v4:v4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:go:form\\/v4:v4.2.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:HjdRDKO0fftVMU5epjPW2SOREcZ6/wLUzEobqUGJuPw=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.0?package-id=12f14633fda10026", + "type": "library", + "name": "github.com/golang-jwt/jwt/v4", + "version": "v4.5.0", + "cpe": "cpe:2.3:a:golang-jwt:jwt\\/v4:v4.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang-jwt/jwt/v4@v4.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:golang_jwt:jwt\\/v4:v4.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:golang:jwt\\/v4:v4.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:7cYmW1XlMY7h7ii7UhUyChSgS5wUJEnm9uZVTGqOWzg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.0.0?package-id=654ff9f540b96d15", + "type": "library", + "name": "github.com/golang-jwt/jwt/v5", + "version": "v5.0.0", + "cpe": "cpe:2.3:a:golang-jwt:jwt\\/v5:v5.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:golang_jwt:jwt\\/v5:v5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:golang:jwt\\/v5:v5.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:1n1XNM9hk7O9mnQoNBGolZvzebBQ7p93ULHRc28XJUE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da?package-id=c2258538dc9e6bea", + "type": "library", + "name": "github.com/golang/groupcache", + "version": "v0.0.0-20210331224755-41bb18bfe9da", + "cpe": "cpe:2.3:a:golang:groupcache:v0.0.0-20210331224755-41bb18bfe9da:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/groupcache@v0.0.0-20210331224755-41bb18bfe9da", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:oI5xCqsCo564l8iNU+DwB5epxmsaqB+rhGL0m5jtYqE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.3?package-id=b024cc583c20e2a8", + "type": "library", + "name": "github.com/golang/protobuf", + "version": "v1.5.3", + "cpe": "cpe:2.3:a:golang:protobuf:v1.5.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.5.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:KhyjKVUg7Usr/dYsdSqoFveMYd5ko72D+zANwlG1mmg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.3?package-id=3a2b1686eb054762", + "type": "library", + "name": "github.com/golang/protobuf", + "version": "v1.5.3", + "cpe": "cpe:2.3:a:golang:protobuf:v1.5.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.5.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:KhyjKVUg7Usr/dYsdSqoFveMYd5ko72D+zANwlG1mmg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.3?package-id=780004816bf4b0da", + "type": "library", + "name": "github.com/golang/protobuf", + "version": "v1.5.3", + "cpe": "cpe:2.3:a:golang:protobuf:v1.5.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.5.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:KhyjKVUg7Usr/dYsdSqoFveMYd5ko72D+zANwlG1mmg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/golang/protobuf@v1.5.3?package-id=ee5a1f033d83e402", + "type": "library", + "name": "github.com/golang/protobuf", + "version": "v1.5.3", + "cpe": "cpe:2.3:a:golang:protobuf:v1.5.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/golang/protobuf@v1.5.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:KhyjKVUg7Usr/dYsdSqoFveMYd5ko72D+zANwlG1mmg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/google/go-cmp@v0.6.0?package-id=f17f71e539547ce0", + "type": "library", + "name": "github.com/google/go-cmp", + "version": "v0.6.0", + "cpe": "cpe:2.3:a:google:go-cmp:v0.6.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/go-cmp@v0.6.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:google:go_cmp:v0.6.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/google/go-containerregistry@v0.16.1?package-id=02d241ef7836979c", + "type": "library", + "name": "github.com/google/go-containerregistry", + "version": "v0.16.1", + "cpe": "cpe:2.3:a:google:go-containerregistry:v0.16.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/go-containerregistry@v0.16.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:google:go_containerregistry:v0.16.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:rUEt426sR6nyrL3gt+18ibRcvYpKYdpsa5ZW7MA08dQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/google/go-containerregistry@v0.16.1?package-id=74e42b7bf03d608d", + "type": "library", + "name": "github.com/google/go-containerregistry", + "version": "v0.16.1", + "cpe": "cpe:2.3:a:google:go-containerregistry:v0.16.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/go-containerregistry@v0.16.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:google:go_containerregistry:v0.16.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:rUEt426sR6nyrL3gt+18ibRcvYpKYdpsa5ZW7MA08dQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/google/go-containerregistry@v0.16.1?package-id=bc149772d83bba49", + "type": "library", + "name": "github.com/google/go-containerregistry", + "version": "v0.16.1", + "cpe": "cpe:2.3:a:google:go-containerregistry:v0.16.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/go-containerregistry@v0.16.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:google:go_containerregistry:v0.16.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:rUEt426sR6nyrL3gt+18ibRcvYpKYdpsa5ZW7MA08dQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/google/go-containerregistry@v0.16.1?package-id=7bf6a2c174bce63c", + "type": "library", + "name": "github.com/google/go-containerregistry", + "version": "v0.16.1", + "cpe": "cpe:2.3:a:google:go-containerregistry:v0.16.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/go-containerregistry@v0.16.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:google:go_containerregistry:v0.16.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:rUEt426sR6nyrL3gt+18ibRcvYpKYdpsa5ZW7MA08dQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/google/s2a-go@v0.1.7?package-id=265835a42feeb6ca", + "type": "library", + "name": "github.com/google/s2a-go", + "version": "v0.1.7", + "cpe": "cpe:2.3:a:google:s2a-go:v0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/s2a-go@v0.1.7", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:google:s2a_go:v0.1.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:60BLSyTrOV4/haCDW4zb1guZItoSq8foHCXrAnjBo/o=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/google/uuid@v1.4.0?package-id=ed870ed005991d82", + "type": "library", + "name": "github.com/google/uuid", + "version": "v1.4.0", + "cpe": "cpe:2.3:a:google:uuid:v1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/uuid@v1.4.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:MtMxsa51/r9yyhkyLsVeVt0B+BGQZzpQiTQ4eHZ8bc4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/google/wire@v0.5.0?package-id=787b86e895ad56f1", + "type": "library", + "name": "github.com/google/wire", + "version": "v0.5.0", + "cpe": "cpe:2.3:a:google:wire:v0.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/google/wire@v0.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:I7ELFeVBr3yfPIcc8+MWvrjk+3VjbcSzoXm3JVa+jD8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.2?package-id=8584b7cf943f4058", + "type": "library", + "name": "github.com/googleapis/enterprise-certificate-proxy", + "version": "v0.3.2", + "cpe": "cpe:2.3:a:googleapis:enterprise-certificate-proxy:v0.3.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:googleapis:enterprise_certificate_proxy:v0.3.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Vie5ybvEvT75RniqhfFxPRy3Bf7vr3h0cechB90XaQs=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/googleapis/gax-go/v2@v2.12.0?package-id=f69a55c247a8b18d", + "type": "library", + "name": "github.com/googleapis/gax-go/v2", + "version": "v2.12.0", + "cpe": "cpe:2.3:a:googleapis:gax-go\\/v2:v2.12.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/googleapis/gax-go/v2@v2.12.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:googleapis:gax_go\\/v2:v2.12.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:A+gCJKdRfqXkr+BIRGtZLibNXf0m1f9E4HG56etFpas=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/gorilla/mux@v1.8.0?package-id=6129c87581ddc58a", + "type": "library", + "name": "github.com/gorilla/mux", + "version": "v1.8.0", + "cpe": "cpe:2.3:a:gorilla:mux:v1.8.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/gorilla/mux@v1.8.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:i40aqfkR1h2SlN9hojwV5ZA91wcXFOvkdNIeFDP5koI=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/grpc-ecosystem/go-grpc-middleware@v1.4.0?package-id=5e6f93c1db1c9d94", + "type": "library", + "name": "github.com/grpc-ecosystem/go-grpc-middleware", + "version": "v1.4.0", + "cpe": "cpe:2.3:a:grpc-ecosystem:go-grpc-middleware:v1.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/grpc-ecosystem/go-grpc-middleware@v1.4.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc-ecosystem:go_grpc_middleware:v1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc_ecosystem:go-grpc-middleware:v1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc_ecosystem:go_grpc_middleware:v1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc:go-grpc-middleware:v1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc:go_grpc_middleware:v1.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:UH//fgunKIs4JdUbpDl1VZCDaL56wXCB/5+wF6uHfaI=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/grpc-ecosystem/go-grpc-prometheus@v1.2.0?package-id=9fa58b5ce80ba78a", + "type": "library", + "name": "github.com/grpc-ecosystem/go-grpc-prometheus", + "version": "v1.2.0", + "cpe": "cpe:2.3:a:grpc-ecosystem:go-grpc-prometheus:v1.2.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/grpc-ecosystem/go-grpc-prometheus@v1.2.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc-ecosystem:go_grpc_prometheus:v1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc_ecosystem:go-grpc-prometheus:v1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc_ecosystem:go_grpc_prometheus:v1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc:go-grpc-prometheus:v1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:grpc:go_grpc_prometheus:v1.2.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Ovs26xHkKqVztRpIrF/92BcuyuQ/YW4NSIpoGtfXNho=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0?package-id=1c59068ffdcfd1cd", + "type": "library", + "name": "github.com/hashicorp/errwrap", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2?package-id=501fb5a55e961e3d", + "type": "library", + "name": "github.com/hashicorp/go-cleanhttp", + "version": "v0.5.2", + "cpe": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-hclog@v1.5.0?package-id=7b6e718ddd909d39", + "type": "library", + "name": "github.com/hashicorp/go-hclog", + "version": "v1.5.0", + "cpe": "cpe:2.3:a:hashicorp:go-hclog:v1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-hclog@v1.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_hclog:v1.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:bI2ocEMgcVlz55Oj1xZNBsVi900c7II+fWDyV9o+13c=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-hclog@v1.5.0?package-id=ee46c99ffdd7d6ed", + "type": "library", + "name": "github.com/hashicorp/go-hclog", + "version": "v1.5.0", + "cpe": "cpe:2.3:a:hashicorp:go-hclog:v1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-hclog@v1.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_hclog:v1.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:bI2ocEMgcVlz55Oj1xZNBsVi900c7II+fWDyV9o+13c=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-hclog@v1.5.0?package-id=653e77e41469c1ef", + "type": "library", + "name": "github.com/hashicorp/go-hclog", + "version": "v1.5.0", + "cpe": "cpe:2.3:a:hashicorp:go-hclog:v1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-hclog@v1.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_hclog:v1.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:bI2ocEMgcVlz55Oj1xZNBsVi900c7II+fWDyV9o+13c=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-hclog@v1.5.0?package-id=ddab282552a53236", + "type": "library", + "name": "github.com/hashicorp/go-hclog", + "version": "v1.5.0", + "cpe": "cpe:2.3:a:hashicorp:go-hclog:v1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-hclog@v1.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_hclog:v1.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:bI2ocEMgcVlz55Oj1xZNBsVi900c7II+fWDyV9o+13c=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1?package-id=3864865c5f214cb3", + "type": "library", + "name": "github.com/hashicorp/go-multierror", + "version": "v1.1.1", + "cpe": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-plugin@v1.4.10?package-id=2d0a24843f1023ee", + "type": "library", + "name": "github.com/hashicorp/go-plugin", + "version": "v1.4.10", + "cpe": "cpe:2.3:a:hashicorp:go-plugin:v1.4.10:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-plugin@v1.4.10", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_plugin:v1.4.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:xUbmA4jC6Dq163/fWcp8P3JuHilrHHMLNRxzGQJ9hNk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-plugin@v1.4.10?package-id=45d2769961e4d749", + "type": "library", + "name": "github.com/hashicorp/go-plugin", + "version": "v1.4.10", + "cpe": "cpe:2.3:a:hashicorp:go-plugin:v1.4.10:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-plugin@v1.4.10", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_plugin:v1.4.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:xUbmA4jC6Dq163/fWcp8P3JuHilrHHMLNRxzGQJ9hNk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-plugin@v1.4.10?package-id=6fd5eb73bf7b8c4d", + "type": "library", + "name": "github.com/hashicorp/go-plugin", + "version": "v1.4.10", + "cpe": "cpe:2.3:a:hashicorp:go-plugin:v1.4.10:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-plugin@v1.4.10", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_plugin:v1.4.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:xUbmA4jC6Dq163/fWcp8P3JuHilrHHMLNRxzGQJ9hNk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-plugin@v1.4.10?package-id=e00533dc215afacd", + "type": "library", + "name": "github.com/hashicorp/go-plugin", + "version": "v1.4.10", + "cpe": "cpe:2.3:a:hashicorp:go-plugin:v1.4.10:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-plugin@v1.4.10", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_plugin:v1.4.10:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:xUbmA4jC6Dq163/fWcp8P3JuHilrHHMLNRxzGQJ9hNk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.4?package-id=b4a9ec70d89ec36e", + "type": "library", + "name": "github.com/hashicorp/go-retryablehttp", + "version": "v0.7.4", + "cpe": "cpe:2.3:a:hashicorp:go-retryablehttp:v0.7.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_retryablehttp:v0.7.4:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ZQgVdpTdAL7WpMIwLzCfbalOcSUdkDZnpUv3/+BxzFA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-rootcerts@v1.0.2?package-id=252294a025922c50", + "type": "library", + "name": "github.com/hashicorp/go-rootcerts", + "version": "v1.0.2", + "cpe": "cpe:2.3:a:hashicorp:go-rootcerts:v1.0.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-rootcerts@v1.0.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_rootcerts:v1.0.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jzhAVGtqPKbwpyCPELlgNWhE1znq+qwJtW5Oi2viEzc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.1.7?package-id=519e70fdc958ebf1", + "type": "library", + "name": "github.com/hashicorp/go-secure-stdlib/parseutil", + "version": "v0.1.7", + "cpe": "cpe:2.3:a:hashicorp:go-secure-stdlib\\/parseutil:v0.1.7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/parseutil@v0.1.7", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_secure_stdlib\\/parseutil:v0.1.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:UpiO20jno/eV1eVZcxqWnUohyKRe1g8FPV/xH1s/2qs=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2?package-id=991aeda9dce2fe56", + "type": "library", + "name": "github.com/hashicorp/go-secure-stdlib/strutil", + "version": "v0.1.2", + "cpe": "cpe:2.3:a:hashicorp:go-secure-stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-secure-stdlib/strutil@v0.1.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_secure_stdlib\\/strutil:v0.1.2:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:kes8mmyCpxJsI7FTwtzRqEy9CdjCtrXrXGuOpxEA7Ts=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.5?package-id=23e13ad425ad6e5c", + "type": "library", + "name": "github.com/hashicorp/go-sockaddr", + "version": "v1.0.5", + "cpe": "cpe:2.3:a:hashicorp:go-sockaddr:v1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/go-sockaddr@v1.0.5", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:hashicorp:go_sockaddr:v1.0.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:dvk7TIXCZpmfOlM+9mlcrWmWjw/wlKT+VDq2wMvfPJU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-5?package-id=dc55449089a6c8e5", + "type": "library", + "name": "github.com/hashicorp/hcl", + "version": "v1.0.1-vault-5", + "cpe": "cpe:2.3:a:hashicorp:hcl:v1.0.1-vault-5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/hcl@v1.0.1-vault-5", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:kI3hhbbyzr4dldA8UdTb7ZlVVlI2DACdCfz31RPDgJM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/hcl/v2@v2.17.0?package-id=706b1f07ea77cde8", + "type": "library", + "name": "github.com/hashicorp/hcl/v2", + "version": "v2.17.0", + "cpe": "cpe:2.3:a:hashicorp:hcl\\/v2:v2.17.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/hcl/v2@v2.17.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:z1XvSUyXd1HP10U4lrLg5e0JMVz6CPaJvAgxM0KNZVY=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/vault/api@v1.10.0?package-id=2d00d7594abd3443", + "type": "library", + "name": "github.com/hashicorp/vault/api", + "version": "v1.10.0", + "cpe": "cpe:2.3:a:hashicorp:vault\\/api:v1.10.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/vault/api@v1.10.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:/US7sIjWN6Imp4o/Rj1Ce2Nr5bki/AXi9vAW3p2tOJQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/yamux@v0.1.1?package-id=8177feea2ed1d616", + "type": "library", + "name": "github.com/hashicorp/yamux", + "version": "v0.1.1", + "cpe": "cpe:2.3:a:hashicorp:yamux:v0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/yamux@v0.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:yrQxtgseBDrq9Y652vSRDvsKCJKOUD+GzTS4Y0Y8pvE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/yamux@v0.1.1?package-id=07ca978ec5c9a360", + "type": "library", + "name": "github.com/hashicorp/yamux", + "version": "v0.1.1", + "cpe": "cpe:2.3:a:hashicorp:yamux:v0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/yamux@v0.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:yrQxtgseBDrq9Y652vSRDvsKCJKOUD+GzTS4Y0Y8pvE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/yamux@v0.1.1?package-id=7d8cd718d2be8437", + "type": "library", + "name": "github.com/hashicorp/yamux", + "version": "v0.1.1", + "cpe": "cpe:2.3:a:hashicorp:yamux:v0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/yamux@v0.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:yrQxtgseBDrq9Y652vSRDvsKCJKOUD+GzTS4Y0Y8pvE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hashicorp/yamux@v0.1.1?package-id=771c0af0d56eb159", + "type": "library", + "name": "github.com/hashicorp/yamux", + "version": "v0.1.1", + "cpe": "cpe:2.3:a:hashicorp:yamux:v0.1.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hashicorp/yamux@v0.1.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:yrQxtgseBDrq9Y652vSRDvsKCJKOUD+GzTS4Y0Y8pvE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/hedwigz/entviz@v0.0.0-20221011080911-9d47f6f1d818?package-id=5068dba1bb56ca6a", + "type": "library", + "name": "github.com/hedwigz/entviz", + "version": "v0.0.0-20221011080911-9d47f6f1d818", + "cpe": "cpe:2.3:a:hedwigz:entviz:v0.0.0-20221011080911-9d47f6f1d818:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/hedwigz/entviz@v0.0.0-20221011080911-9d47f6f1d818", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:IIK1IY/v9aqVpaNXTr/rkoEnOc4rH3KbPYZYZLP3N04=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/iancoleman/orderedmap@v0.3.0?package-id=185ad0411659e93b", + "type": "library", + "name": "github.com/iancoleman/orderedmap", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:iancoleman:orderedmap:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/iancoleman/orderedmap@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:5cbR2grmZR/DiVt+VJopEhtVs9YGInGIxAoMJn+Ichc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/iancoleman/orderedmap@v0.3.0?package-id=d5726afa02a72504", + "type": "library", + "name": "github.com/iancoleman/orderedmap", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:iancoleman:orderedmap:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/iancoleman/orderedmap@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:5cbR2grmZR/DiVt+VJopEhtVs9YGInGIxAoMJn+Ichc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/iancoleman/orderedmap@v0.3.0?package-id=d642378509211a21", + "type": "library", + "name": "github.com/iancoleman/orderedmap", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:iancoleman:orderedmap:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/iancoleman/orderedmap@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:5cbR2grmZR/DiVt+VJopEhtVs9YGInGIxAoMJn+Ichc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/iancoleman/orderedmap@v0.3.0?package-id=c3c3818f5d8afe8b", + "type": "library", + "name": "github.com/iancoleman/orderedmap", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:iancoleman:orderedmap:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/iancoleman/orderedmap@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:5cbR2grmZR/DiVt+VJopEhtVs9YGInGIxAoMJn+Ichc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/imdario/mergo@v0.3.16?package-id=170cddbb5b28a932", + "type": "library", + "name": "github.com/imdario/mergo", + "version": "v0.3.16", + "cpe": "cpe:2.3:a:imdario:mergo:v0.3.16:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/imdario/mergo@v0.3.16", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:wwQJbIsHYGMUyLSPrEq1CT16AhnhNJQ51+4fdHUnCl4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/improbable-eng/grpc-web@v0.15.0?package-id=cae4f5c6d580dd35", + "type": "library", + "name": "github.com/improbable-eng/grpc-web", + "version": "v0.15.0", + "cpe": "cpe:2.3:a:improbable-eng:grpc-web:v0.15.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/improbable-eng/grpc-web@v0.15.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:improbable-eng:grpc_web:v0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:improbable_eng:grpc-web:v0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:improbable_eng:grpc_web:v0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:improbable:grpc-web:v0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:improbable:grpc_web:v0.15.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:BN+7z6uNXZ1tQGcNAuaU1YjsLTApzkjt2tzCixLaUPQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/in-toto/attestation@v0.1.1-0.20231010121940-09a03152c04a?package-id=529628437f52b006", + "type": "library", + "name": "github.com/in-toto/attestation", + "version": "v0.1.1-0.20231010121940-09a03152c04a", + "cpe": "cpe:2.3:a:in-toto:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/in-toto/attestation@v0.1.1-0.20231010121940-09a03152c04a", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:in_toto:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:in:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:y4ZRSC/GJWAFi+u9t7sNxjNsQKQvFKca1qc3Wr1ZX6Q=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/in-toto/attestation@v0.1.1-0.20231010121940-09a03152c04a?package-id=84d90143f8175704", + "type": "library", + "name": "github.com/in-toto/attestation", + "version": "v0.1.1-0.20231010121940-09a03152c04a", + "cpe": "cpe:2.3:a:in-toto:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/in-toto/attestation@v0.1.1-0.20231010121940-09a03152c04a", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:in_toto:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:in:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:y4ZRSC/GJWAFi+u9t7sNxjNsQKQvFKca1qc3Wr1ZX6Q=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/in-toto/attestation@v0.1.1-0.20231010121940-09a03152c04a?package-id=1a7282217ffdcdf3", + "type": "library", + "name": "github.com/in-toto/attestation", + "version": "v0.1.1-0.20231010121940-09a03152c04a", + "cpe": "cpe:2.3:a:in-toto:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/in-toto/attestation@v0.1.1-0.20231010121940-09a03152c04a", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:in_toto:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:in:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:y4ZRSC/GJWAFi+u9t7sNxjNsQKQvFKca1qc3Wr1ZX6Q=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/in-toto/attestation@v0.1.1-0.20231010121940-09a03152c04a?package-id=14f84f5dadfa1f30", + "type": "library", + "name": "github.com/in-toto/attestation", + "version": "v0.1.1-0.20231010121940-09a03152c04a", + "cpe": "cpe:2.3:a:in-toto:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/in-toto/attestation@v0.1.1-0.20231010121940-09a03152c04a", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:in_toto:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:in:attestation:v0.1.1-0.20231010121940-09a03152c04a:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:y4ZRSC/GJWAFi+u9t7sNxjNsQKQvFKca1qc3Wr1ZX6Q=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/invopop/jsonschema@v0.7.0?package-id=035710c852e5c0cc", + "type": "library", + "name": "github.com/invopop/jsonschema", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:invopop:jsonschema:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/invopop/jsonschema@v0.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:2vgQcBz1n256N+FpX3Jq7Y17AjYt46Ig3zIWyy770So=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/invopop/jsonschema@v0.7.0?package-id=7aa1bf2b0f67bd7b", + "type": "library", + "name": "github.com/invopop/jsonschema", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:invopop:jsonschema:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/invopop/jsonschema@v0.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:2vgQcBz1n256N+FpX3Jq7Y17AjYt46Ig3zIWyy770So=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/invopop/jsonschema@v0.7.0?package-id=711e91a510db5087", + "type": "library", + "name": "github.com/invopop/jsonschema", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:invopop:jsonschema:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/invopop/jsonschema@v0.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:2vgQcBz1n256N+FpX3Jq7Y17AjYt46Ig3zIWyy770So=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/invopop/jsonschema@v0.7.0?package-id=2da4be1610d9cdf4", + "type": "library", + "name": "github.com/invopop/jsonschema", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:invopop:jsonschema:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/invopop/jsonschema@v0.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:2vgQcBz1n256N+FpX3Jq7Y17AjYt46Ig3zIWyy770So=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/jackc/pgpassfile@v1.0.0?package-id=40b72b18254a790f", + "type": "library", + "name": "github.com/jackc/pgpassfile", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:jackc:pgpassfile:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jackc/pgpassfile@v1.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:/6Hmqy13Ss2zCq62VdNG8tM1wchn8zjSGOBJ6icpsIM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/jackc/pgservicefile@v0.0.0-20221227161230-091c0ba34f0a?package-id=5fbb5129fc6f29a1", + "type": "library", + "name": "github.com/jackc/pgservicefile", + "version": "v0.0.0-20221227161230-091c0ba34f0a", + "cpe": "cpe:2.3:a:jackc:pgservicefile:v0.0.0-20221227161230-091c0ba34f0a:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jackc/pgservicefile@v0.0.0-20221227161230-091c0ba34f0a", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:bbPeKD0xmW/Y25WS6cokEszi5g+S0QxI/d45PkRi7Nk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/jackc/pgx/v5@v5.4.3?package-id=b0784d9101783bee", + "type": "library", + "name": "github.com/jackc/pgx/v5", + "version": "v5.4.3", + "cpe": "cpe:2.3:a:jackc:pgx\\/v5:v5.4.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jackc/pgx/v5@v5.4.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:cxFyXhxlvAifxnkKKdlxv8XqUf59tDlYjnV5YYfsJJY=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7?package-id=6252410ef7219e92", + "type": "library", + "name": "github.com/jedib0t/go-pretty/v6", + "version": "v6.4.7", + "cpe": "cpe:2.3:a:jedib0t:go-pretty\\/v6:v6.4.7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jedib0t:go_pretty\\/v6:v6.4.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lwiTJr1DEkAgzljsUsORmWsVn5MQjt1BPJdPCtJ6KXE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7?package-id=568ddb435a4507d6", + "type": "library", + "name": "github.com/jedib0t/go-pretty/v6", + "version": "v6.4.7", + "cpe": "cpe:2.3:a:jedib0t:go-pretty\\/v6:v6.4.7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jedib0t:go_pretty\\/v6:v6.4.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lwiTJr1DEkAgzljsUsORmWsVn5MQjt1BPJdPCtJ6KXE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7?package-id=7ede02e2a76526c1", + "type": "library", + "name": "github.com/jedib0t/go-pretty/v6", + "version": "v6.4.7", + "cpe": "cpe:2.3:a:jedib0t:go-pretty\\/v6:v6.4.7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jedib0t:go_pretty\\/v6:v6.4.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lwiTJr1DEkAgzljsUsORmWsVn5MQjt1BPJdPCtJ6KXE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7?package-id=622b3af4eb969233", + "type": "library", + "name": "github.com/jedib0t/go-pretty/v6", + "version": "v6.4.7", + "cpe": "cpe:2.3:a:jedib0t:go-pretty\\/v6:v6.4.7:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jedib0t/go-pretty/v6@v6.4.7", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jedib0t:go_pretty\\/v6:v6.4.7:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lwiTJr1DEkAgzljsUsORmWsVn5MQjt1BPJdPCtJ6KXE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/jmespath/go-jmespath@v0.4.0?package-id=72d7cf810d915842", + "type": "library", + "name": "github.com/jmespath/go-jmespath", + "version": "v0.4.0", + "cpe": "cpe:2.3:a:jmespath:go-jmespath:v0.4.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/jmespath/go-jmespath@v0.4.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:jmespath:go_jmespath:v0.4.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/klauspost/compress@v1.17.2?package-id=b6642d6183fa6e7e", + "type": "library", + "name": "github.com/klauspost/compress", + "version": "v1.17.2", + "cpe": "cpe:2.3:a:klauspost:compress:v1.17.2:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/klauspost/compress@v1.17.2", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:RlWWUY/Dr4fL8qk9YG7DTZ7PDgME2V4csBXA8L/ixi4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/kylelemons/godebug@v1.1.0?package-id=034c3d863ccc93fc", + "type": "library", + "name": "github.com/kylelemons/godebug", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:kylelemons:godebug:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/kylelemons/godebug@v1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-colorable@v0.1.13?package-id=ba67eb830e8cd07f", + "type": "library", + "name": "github.com/mattn/go-colorable", + "version": "v0.1.13", + "cpe": "cpe:2.3:a:mattn:go-colorable:v0.1.13:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.13", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_colorable:v0.1.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-colorable@v0.1.13?package-id=181e73e676a67383", + "type": "library", + "name": "github.com/mattn/go-colorable", + "version": "v0.1.13", + "cpe": "cpe:2.3:a:mattn:go-colorable:v0.1.13:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.13", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_colorable:v0.1.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-colorable@v0.1.13?package-id=d5c1c50fe4921646", + "type": "library", + "name": "github.com/mattn/go-colorable", + "version": "v0.1.13", + "cpe": "cpe:2.3:a:mattn:go-colorable:v0.1.13:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.13", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_colorable:v0.1.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-colorable@v0.1.13?package-id=6a6b341c5baf899e", + "type": "library", + "name": "github.com/mattn/go-colorable", + "version": "v0.1.13", + "cpe": "cpe:2.3:a:mattn:go-colorable:v0.1.13:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.13", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_colorable:v0.1.13:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.19?package-id=76acab36c74c9ad2", + "type": "library", + "name": "github.com/mattn/go-isatty", + "version": "v0.0.19", + "cpe": "cpe:2.3:a:mattn:go-isatty:v0.0.19:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.19", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_isatty:v0.0.19:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:JITubQf0MOLdlGRuRq+jtsDlekdYPia9ZFsB8h/APPA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.19?package-id=b48201623611b494", + "type": "library", + "name": "github.com/mattn/go-isatty", + "version": "v0.0.19", + "cpe": "cpe:2.3:a:mattn:go-isatty:v0.0.19:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.19", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_isatty:v0.0.19:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:JITubQf0MOLdlGRuRq+jtsDlekdYPia9ZFsB8h/APPA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.19?package-id=c53ace3b4d4f08fd", + "type": "library", + "name": "github.com/mattn/go-isatty", + "version": "v0.0.19", + "cpe": "cpe:2.3:a:mattn:go-isatty:v0.0.19:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.19", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_isatty:v0.0.19:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:JITubQf0MOLdlGRuRq+jtsDlekdYPia9ZFsB8h/APPA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-isatty@v0.0.19?package-id=03566c9ab5871fbc", + "type": "library", + "name": "github.com/mattn/go-isatty", + "version": "v0.0.19", + "cpe": "cpe:2.3:a:mattn:go-isatty:v0.0.19:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.19", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_isatty:v0.0.19:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:JITubQf0MOLdlGRuRq+jtsDlekdYPia9ZFsB8h/APPA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15?package-id=51d96c9851fd4731", + "type": "library", + "name": "github.com/mattn/go-runewidth", + "version": "v0.0.15", + "cpe": "cpe:2.3:a:mattn:go-runewidth:v0.0.15:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_runewidth:v0.0.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:UNAjwbU9l54TA3KzvqLGxwWjHmMgBUVhBiTjelZgg3U=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15?package-id=030f03222956c418", + "type": "library", + "name": "github.com/mattn/go-runewidth", + "version": "v0.0.15", + "cpe": "cpe:2.3:a:mattn:go-runewidth:v0.0.15:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_runewidth:v0.0.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:UNAjwbU9l54TA3KzvqLGxwWjHmMgBUVhBiTjelZgg3U=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15?package-id=b2dbc52834961291", + "type": "library", + "name": "github.com/mattn/go-runewidth", + "version": "v0.0.15", + "cpe": "cpe:2.3:a:mattn:go-runewidth:v0.0.15:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_runewidth:v0.0.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:UNAjwbU9l54TA3KzvqLGxwWjHmMgBUVhBiTjelZgg3U=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15?package-id=6be8ac9e8c1b6b7c", + "type": "library", + "name": "github.com/mattn/go-runewidth", + "version": "v0.0.15", + "cpe": "cpe:2.3:a:mattn:go-runewidth:v0.0.15:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.15", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mattn:go_runewidth:v0.0.15:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:UNAjwbU9l54TA3KzvqLGxwWjHmMgBUVhBiTjelZgg3U=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/matttproud/golang_protobuf_extensions/v2@v2.0.0?package-id=9f8de9a4b0fce2d2", + "type": "library", + "name": "github.com/matttproud/golang_protobuf_extensions/v2", + "version": "v2.0.0", + "cpe": "cpe:2.3:a:matttproud:golang-protobuf-extensions\\/v2:v2.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/matttproud/golang_protobuf_extensions/v2@v2.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:matttproud:golang_protobuf_extensions\\/v2:v2.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jWpvCLoY8Z/e3VKvlsiIGKtc+UG6U5vzxaoagmhXfyg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0?package-id=bf10ca687e280acc", + "type": "library", + "name": "github.com/mitchellh/go-homedir", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:mitchellh:go-homedir:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mitchellh:go_homedir:v1.1.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mitchellh/go-testing-interface@v1.14.1?package-id=d835d37e22d7bfc6", + "type": "library", + "name": "github.com/mitchellh/go-testing-interface", + "version": "v1.14.1", + "cpe": "cpe:2.3:a:mitchellh:go-testing-interface:v1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/go-testing-interface@v1.14.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mitchellh:go_testing_interface:v1.14.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jrgshOhYAUVNMAJiKbEu7EqAwgJJ2JqpQmpLJOu07cU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mitchellh/go-testing-interface@v1.14.1?package-id=b2baba17dbf58921", + "type": "library", + "name": "github.com/mitchellh/go-testing-interface", + "version": "v1.14.1", + "cpe": "cpe:2.3:a:mitchellh:go-testing-interface:v1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/go-testing-interface@v1.14.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mitchellh:go_testing_interface:v1.14.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jrgshOhYAUVNMAJiKbEu7EqAwgJJ2JqpQmpLJOu07cU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mitchellh/go-testing-interface@v1.14.1?package-id=e5e5f80aac76aef8", + "type": "library", + "name": "github.com/mitchellh/go-testing-interface", + "version": "v1.14.1", + "cpe": "cpe:2.3:a:mitchellh:go-testing-interface:v1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/go-testing-interface@v1.14.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mitchellh:go_testing_interface:v1.14.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jrgshOhYAUVNMAJiKbEu7EqAwgJJ2JqpQmpLJOu07cU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mitchellh/go-testing-interface@v1.14.1?package-id=f375eae2fe488957", + "type": "library", + "name": "github.com/mitchellh/go-testing-interface", + "version": "v1.14.1", + "cpe": "cpe:2.3:a:mitchellh:go-testing-interface:v1.14.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/go-testing-interface@v1.14.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mitchellh:go_testing_interface:v1.14.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jrgshOhYAUVNMAJiKbEu7EqAwgJJ2JqpQmpLJOu07cU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1?package-id=c18eddaed70bb25c", + "type": "library", + "name": "github.com/mitchellh/go-wordwrap", + "version": "v1.0.1", + "cpe": "cpe:2.3:a:mitchellh:go-wordwrap:v1.0.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:mitchellh:go_wordwrap:v1.0.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:TLuKupo69TCn6TQSyGxwI1EblZZEsQ0vMlAFQflz0v0=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.0?package-id=26c3d47653655ad0", + "type": "library", + "name": "github.com/mitchellh/mapstructure", + "version": "v1.5.0", + "cpe": "cpe:2.3:a:mitchellh:mapstructure:v1.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/mitchellh/mapstructure@v1.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jeMsZIYE/09sWLaz43PL7Gy6RuMjD2eJVyuac5Z2hdY=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/moby/moby@v24.0.5+incompatible?package-id=a21d338c2cd1ab2c", + "type": "library", + "name": "github.com/moby/moby", + "version": "v24.0.5+incompatible", + "cpe": "cpe:2.3:a:moby:moby:v24.0.5\\+incompatible:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/moby/moby@v24.0.5+incompatible", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:uUbydai/Y9J7Ybt+lFI3zBdnsMYXnXE9vEcfZDoEE8Q=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/muesli/reflow@v0.3.0?package-id=26c5bd787e49c7c1", + "type": "library", + "name": "github.com/muesli/reflow", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:muesli:reflow:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/muesli/reflow@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:IFsN6K9NfGtjeggFP+68I4chLZV2yIKsXJFNZ+eWh6s=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/muesli/reflow@v0.3.0?package-id=ce4bb77a761a0e34", + "type": "library", + "name": "github.com/muesli/reflow", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:muesli:reflow:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/muesli/reflow@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:IFsN6K9NfGtjeggFP+68I4chLZV2yIKsXJFNZ+eWh6s=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/muesli/reflow@v0.3.0?package-id=4345390b16e0bd85", + "type": "library", + "name": "github.com/muesli/reflow", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:muesli:reflow:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/muesli/reflow@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:IFsN6K9NfGtjeggFP+68I4chLZV2yIKsXJFNZ+eWh6s=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/muesli/reflow@v0.3.0?package-id=8ce172e7de51ae13", + "type": "library", + "name": "github.com/muesli/reflow", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:muesli:reflow:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/muesli/reflow@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:IFsN6K9NfGtjeggFP+68I4chLZV2yIKsXJFNZ+eWh6s=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/oklog/run@v1.1.0?package-id=11f45d597027b527", + "type": "library", + "name": "github.com/oklog/run", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:oklog:run:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/oklog/run@v1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:GEenZ1cK0+q0+wsJew9qUg/DyD8k3JzYsZAi5gYi2mA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/oklog/run@v1.1.0?package-id=2df7f58655355482", + "type": "library", + "name": "github.com/oklog/run", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:oklog:run:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/oklog/run@v1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:GEenZ1cK0+q0+wsJew9qUg/DyD8k3JzYsZAi5gYi2mA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/oklog/run@v1.1.0?package-id=1f8528de7938e8de", + "type": "library", + "name": "github.com/oklog/run", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:oklog:run:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/oklog/run@v1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:GEenZ1cK0+q0+wsJew9qUg/DyD8k3JzYsZAi5gYi2mA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/oklog/run@v1.1.0?package-id=fbc4e8fd079bf973", + "type": "library", + "name": "github.com/oklog/run", + "version": "v1.1.0", + "cpe": "cpe:2.3:a:oklog:run:v1.1.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/oklog/run@v1.1.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:GEenZ1cK0+q0+wsJew9qUg/DyD8k3JzYsZAi5gYi2mA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0?package-id=3634802719c473b6", + "type": "library", + "name": "github.com/opencontainers/go-digest", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/opencontainers/image-spec@v1.1.0-rc5?package-id=f9d87ab96bbf5f09", + "type": "library", + "name": "github.com/opencontainers/image-spec", + "version": "v1.1.0-rc5", + "cpe": "cpe:2.3:a:opencontainers:image-spec:v1.1.0-rc5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/opencontainers/image-spec@v1.1.0-rc5", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:opencontainers:image_spec:v1.1.0-rc5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Ygwkfw9bpDvs+c9E34SdgGOj41dX/cbdlwvlWt0pnFI=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/pkg/browser@v0.0.0-20210911075715-681adbf594b8?package-id=6320a655f8fa3a6e", + "type": "library", + "name": "github.com/pkg/browser", + "version": "v0.0.0-20210911075715-681adbf594b8", + "cpe": "cpe:2.3:a:pkg:browser:v0.0.0-20210911075715-681adbf594b8:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/pkg/browser@v0.0.0-20210911075715-681adbf594b8", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:KoWmjvw+nsYOo29YJK9vDA65RGE3NrOnUtO7a+RF9HU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/pkg/errors@v0.9.1?package-id=8e17fb994454d3dc", + "type": "library", + "name": "github.com/pkg/errors", + "version": "v0.9.1", + "cpe": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/pkg/errors@v0.9.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/prometheus/client_golang@v1.17.0?package-id=d1c4975ae4840eda", + "type": "library", + "name": "github.com/prometheus/client_golang", + "version": "v1.17.0", + "cpe": "cpe:2.3:a:prometheus:client-golang:v1.17.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/client_golang@v1.17.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prometheus:client_golang:v1.17.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:rl2sfwZMtSthVU752MqfjQozy7blglC+1SOtjMAMh+Q=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/prometheus/client_model@v0.5.0?package-id=766ebda083f3307f", + "type": "library", + "name": "github.com/prometheus/client_model", + "version": "v0.5.0", + "cpe": "cpe:2.3:a:prometheus:client-model:v0.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/client_model@v0.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:prometheus:client_model:v0.5.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:VQw1hfvPvk3Uv6Qf29VrPF32JB6rtbgI6cYPYQjL0Qw=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/prometheus/common@v0.45.0?package-id=d52f33aa31123797", + "type": "library", + "name": "github.com/prometheus/common", + "version": "v0.45.0", + "cpe": "cpe:2.3:a:prometheus:common:v0.45.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/common@v0.45.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:2BGz0eBc2hdMDLnO/8n0jeB3oPrt2D08CekT0lneoxM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/prometheus/procfs@v0.12.0?package-id=9881fe5965a12d1a", + "type": "library", + "name": "github.com/prometheus/procfs", + "version": "v0.12.0", + "cpe": "cpe:2.3:a:prometheus:procfs:v0.12.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/prometheus/procfs@v0.12.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jluTpSng7V9hY0O2R9DzzJHYb2xULk9VTR1V1R/k6Bo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/rivo/uniseg@v0.4.4?package-id=00f2cbcd10e6a103", + "type": "library", + "name": "github.com/rivo/uniseg", + "version": "v0.4.4", + "cpe": "cpe:2.3:a:rivo:uniseg:v0.4.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rivo/uniseg@v0.4.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:8TfxU8dW6PdqD27gjM8MVNuicgxIjxpm4K7x4jp8sis=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/rivo/uniseg@v0.4.4?package-id=3e0ad65ed06cfbc7", + "type": "library", + "name": "github.com/rivo/uniseg", + "version": "v0.4.4", + "cpe": "cpe:2.3:a:rivo:uniseg:v0.4.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rivo/uniseg@v0.4.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:8TfxU8dW6PdqD27gjM8MVNuicgxIjxpm4K7x4jp8sis=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/rivo/uniseg@v0.4.4?package-id=d314b2241df4ffaa", + "type": "library", + "name": "github.com/rivo/uniseg", + "version": "v0.4.4", + "cpe": "cpe:2.3:a:rivo:uniseg:v0.4.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rivo/uniseg@v0.4.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:8TfxU8dW6PdqD27gjM8MVNuicgxIjxpm4K7x4jp8sis=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/rivo/uniseg@v0.4.4?package-id=e7dbbccb2ef0d6cb", + "type": "library", + "name": "github.com/rivo/uniseg", + "version": "v0.4.4", + "cpe": "cpe:2.3:a:rivo:uniseg:v0.4.4:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rivo/uniseg@v0.4.4", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:8TfxU8dW6PdqD27gjM8MVNuicgxIjxpm4K7x4jp8sis=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/rs/cors@v1.10.1?package-id=5217f781fdfebf03", + "type": "library", + "name": "github.com/rs/cors", + "version": "v1.10.1", + "cpe": "cpe:2.3:a:rs:cors:v1.10.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rs/cors@v1.10.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:L0uuZVXIKlI1SShY2nhFfo44TYvDPQ1w4oFkUJNfhyo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/rs/zerolog@v1.30.0?package-id=7bc215d30de7ca64", + "type": "library", + "name": "github.com/rs/zerolog", + "version": "v1.30.0", + "cpe": "cpe:2.3:a:rs:zerolog:v1.30.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/rs/zerolog@v1.30.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:SymVODrcRsaRaSInD9yQtKbtWqwsfoPcRff/oRXLj4c=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/ryanuber/go-glob@v1.0.0?package-id=9fcf4dd457193f5f", + "type": "library", + "name": "github.com/ryanuber/go-glob", + "version": "v1.0.0", + "cpe": "cpe:2.3:a:ryanuber:go-glob:v1.0.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/ryanuber/go-glob@v1.0.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:ryanuber:go_glob:v1.0.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:iQh3xXAumdQ+4Ufa5b25cRpC5TYKlno6hsv6Cb3pkBk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1?package-id=30bae7799a0df73c", + "type": "library", + "name": "github.com/santhosh-tekuri/jsonschema/v5", + "version": "v5.3.1", + "cpe": "cpe:2.3:a:santhosh-tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:santhosh_tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:santhosh:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lZUw3E0/J3roVtGQ+SCrUrg3ON6NgVqpn3+iol9aGu4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1?package-id=cb4b622763a93227", + "type": "library", + "name": "github.com/santhosh-tekuri/jsonschema/v5", + "version": "v5.3.1", + "cpe": "cpe:2.3:a:santhosh-tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:santhosh_tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:santhosh:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lZUw3E0/J3roVtGQ+SCrUrg3ON6NgVqpn3+iol9aGu4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1?package-id=14d1003496935c58", + "type": "library", + "name": "github.com/santhosh-tekuri/jsonschema/v5", + "version": "v5.3.1", + "cpe": "cpe:2.3:a:santhosh-tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:santhosh_tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:santhosh:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lZUw3E0/J3roVtGQ+SCrUrg3ON6NgVqpn3+iol9aGu4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1?package-id=61b4d7d1bd7596fa", + "type": "library", + "name": "github.com/santhosh-tekuri/jsonschema/v5", + "version": "v5.3.1", + "cpe": "cpe:2.3:a:santhosh-tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v5@v5.3.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:santhosh_tekuri:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:santhosh:jsonschema\\/v5:v5.3.1:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:lZUw3E0/J3roVtGQ+SCrUrg3ON6NgVqpn3+iol9aGu4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.7.0?package-id=e30dbbfe2f7d9127", + "type": "library", + "name": "github.com/secure-systems-lab/go-securesystemslib", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:OwvJ5jQf9LnIAS83waAjPbcMsODrTQUpJ02eNLUoxBg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.7.0?package-id=5d28c4f8b5874a37", + "type": "library", + "name": "github.com/secure-systems-lab/go-securesystemslib", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:OwvJ5jQf9LnIAS83waAjPbcMsODrTQUpJ02eNLUoxBg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.7.0?package-id=65440a4d463ed747", + "type": "library", + "name": "github.com/secure-systems-lab/go-securesystemslib", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:OwvJ5jQf9LnIAS83waAjPbcMsODrTQUpJ02eNLUoxBg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.7.0?package-id=44fefa4f798e3ff4", + "type": "library", + "name": "github.com/secure-systems-lab/go-securesystemslib", + "version": "v0.7.0", + "cpe": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.7.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure:go-securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:secure:go_securesystemslib:v0.7.0:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:OwvJ5jQf9LnIAS83waAjPbcMsODrTQUpJ02eNLUoxBg=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/sirupsen/logrus@v1.9.3?package-id=9c4fe3bb3eaed94e", + "type": "library", + "name": "github.com/sirupsen/logrus", + "version": "v1.9.3", + "cpe": "cpe:2.3:a:sirupsen:logrus:v1.9.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/sirupsen/logrus@v1.9.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/spf13/pflag@v1.0.5?package-id=4f9707df23791c49", + "type": "library", + "name": "github.com/spf13/pflag", + "version": "v1.0.5", + "cpe": "cpe:2.3:a:spf13:pflag:v1.0.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/spf13/pflag@v1.0.5", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/vbatts/tar-split@v0.11.5?package-id=abcbe5bc10958418", + "type": "library", + "name": "github.com/vbatts/tar-split", + "version": "v0.11.5", + "cpe": "cpe:2.3:a:vbatts:tar-split:v0.11.5:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/vbatts/tar-split@v0.11.5", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:vbatts:tar_split:v0.11.5:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:3bHCTIheBm1qFTcgh9oPu+nNBtX+XJIupG/vacinCts=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/github.com/zclconf/go-cty@v1.13.3?package-id=ab2fcaf4c7f05613", + "type": "library", + "name": "github.com/zclconf/go-cty", + "version": "v1.13.3", + "cpe": "cpe:2.3:a:zclconf:go-cty:v1.13.3:*:*:*:*:*:*:*", + "purl": "pkg:golang/github.com/zclconf/go-cty@v1.13.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:cpe23", + "value": "cpe:2.3:a:zclconf:go_cty:v1.13.3:*:*:*:*:*:*:*" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:m+b9q3YDbg6Bec5rr+KGy1MzEVzY/jC2X+YX4yqKtHI=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.opencensus.io@v0.24.0?package-id=5798e580b022a379", + "type": "library", + "name": "go.opencensus.io", + "version": "v0.24.0", + "purl": "pkg:golang/go.opencensus.io@v0.24.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:y73uSU6J157QMP2kn2r30vwW1A2W2WFwSCGnAVxeaD0=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.uber.org/multierr@v1.11.0?package-id=49e3592a5d3bc0f1", + "type": "library", + "name": "go.uber.org/multierr", + "version": "v1.11.0", + "purl": "pkg:golang/go.uber.org/multierr@v1.11.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.uber.org/multierr@v1.11.0?package-id=e020f537f4dc3ac4", + "type": "library", + "name": "go.uber.org/multierr", + "version": "v1.11.0", + "purl": "pkg:golang/go.uber.org/multierr@v1.11.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.uber.org/multierr@v1.11.0?package-id=8da9eaf215c73644", + "type": "library", + "name": "go.uber.org/multierr", + "version": "v1.11.0", + "purl": "pkg:golang/go.uber.org/multierr@v1.11.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.uber.org/multierr@v1.11.0?package-id=c19498a793ff3d15", + "type": "library", + "name": "go.uber.org/multierr", + "version": "v1.11.0", + "purl": "pkg:golang/go.uber.org/multierr@v1.11.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.uber.org/zap@v1.26.0?package-id=1a7b797e3383faba", + "type": "library", + "name": "go.uber.org/zap", + "version": "v1.26.0", + "purl": "pkg:golang/go.uber.org/zap@v1.26.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:sI7k6L95XOKS281NhVKOFCUNIvv9e0w4BF8N3u+tCRo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.uber.org/zap@v1.26.0?package-id=437fd35517164d16", + "type": "library", + "name": "go.uber.org/zap", + "version": "v1.26.0", + "purl": "pkg:golang/go.uber.org/zap@v1.26.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:sI7k6L95XOKS281NhVKOFCUNIvv9e0w4BF8N3u+tCRo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.uber.org/zap@v1.26.0?package-id=5eafed4baa2ffaf8", + "type": "library", + "name": "go.uber.org/zap", + "version": "v1.26.0", + "purl": "pkg:golang/go.uber.org/zap@v1.26.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:sI7k6L95XOKS281NhVKOFCUNIvv9e0w4BF8N3u+tCRo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/go.uber.org/zap@v1.26.0?package-id=e488752e056f3f8a", + "type": "library", + "name": "go.uber.org/zap", + "version": "v1.26.0", + "purl": "pkg:golang/go.uber.org/zap@v1.26.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:sI7k6L95XOKS281NhVKOFCUNIvv9e0w4BF8N3u+tCRo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/crypto@v0.14.0?package-id=eda7f8e4c9dba26f", + "type": "library", + "name": "golang.org/x/crypto", + "version": "v0.14.0", + "cpe": "cpe:2.3:a:golang:x\\/crypto:v0.14.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/crypto@v0.14.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:wBqGXzWJW6m1XrIKlAH0Hs1JJ7+9KBwnIO8v66Q9cHc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/crypto@v0.14.0?package-id=4361fc5a46c5738f", + "type": "library", + "name": "golang.org/x/crypto", + "version": "v0.14.0", + "cpe": "cpe:2.3:a:golang:x\\/crypto:v0.14.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/crypto@v0.14.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:wBqGXzWJW6m1XrIKlAH0Hs1JJ7+9KBwnIO8v66Q9cHc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/crypto@v0.14.0?package-id=e231641edf9a9442", + "type": "library", + "name": "golang.org/x/crypto", + "version": "v0.14.0", + "cpe": "cpe:2.3:a:golang:x\\/crypto:v0.14.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/crypto@v0.14.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:wBqGXzWJW6m1XrIKlAH0Hs1JJ7+9KBwnIO8v66Q9cHc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/crypto@v0.14.0?package-id=b108fd094187b044", + "type": "library", + "name": "golang.org/x/crypto", + "version": "v0.14.0", + "cpe": "cpe:2.3:a:golang:x\\/crypto:v0.14.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/crypto@v0.14.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:wBqGXzWJW6m1XrIKlAH0Hs1JJ7+9KBwnIO8v66Q9cHc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/mod@v0.13.0?package-id=66a7289e1e9e3d67", + "type": "library", + "name": "golang.org/x/mod", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/mod:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/mod@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:I/DsJXRlw/8l/0c24sM9yb0T4z9liZTduXvdAWYiysY=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/net@v0.17.0?package-id=171005028177564e", + "type": "library", + "name": "golang.org/x/net", + "version": "v0.17.0", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.17.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.17.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:pVaXccu2ozPjCXewfr1S7xza/zcXTity9cCdXQYSjIM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/net@v0.17.0?package-id=cf640dc590e7e5a2", + "type": "library", + "name": "golang.org/x/net", + "version": "v0.17.0", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.17.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.17.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:pVaXccu2ozPjCXewfr1S7xza/zcXTity9cCdXQYSjIM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/net@v0.17.0?package-id=04b51e3f43166573", + "type": "library", + "name": "golang.org/x/net", + "version": "v0.17.0", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.17.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.17.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:pVaXccu2ozPjCXewfr1S7xza/zcXTity9cCdXQYSjIM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/net@v0.17.0?package-id=3a37828483df8615", + "type": "library", + "name": "golang.org/x/net", + "version": "v0.17.0", + "cpe": "cpe:2.3:a:golang:x\\/net:v0.17.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/net@v0.17.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:pVaXccu2ozPjCXewfr1S7xza/zcXTity9cCdXQYSjIM=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/oauth2@v0.13.0?package-id=86f3ddbf7ee8622e", + "type": "library", + "name": "golang.org/x/oauth2", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/oauth2:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/oauth2@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jDDenyj+WgFtmV3zYVoi8aE2BwtXFLWOA67ZfNWftiY=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/sync@v0.5.0?package-id=32d4132673364628", + "type": "library", + "name": "golang.org/x/sync", + "version": "v0.5.0", + "cpe": "cpe:2.3:a:golang:x\\/sync:v0.5.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sync@v0.5.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:60k92dhOjHxJkrqnwsfl8KuaHbn/5dl0lUPUklKo3qE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/sys@v0.13.0?package-id=a53b10e2f2724d6d", + "type": "library", + "name": "golang.org/x/sys", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Af8nKPmuFypiUBjVoU9V20FiaFXOcuZI21p0ycVYYGE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/sys@v0.13.0?package-id=db43822e2bdf85fb", + "type": "library", + "name": "golang.org/x/sys", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Af8nKPmuFypiUBjVoU9V20FiaFXOcuZI21p0ycVYYGE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/sys@v0.13.0?package-id=47c93b727a329cc0", + "type": "library", + "name": "golang.org/x/sys", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Af8nKPmuFypiUBjVoU9V20FiaFXOcuZI21p0ycVYYGE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/sys@v0.13.0?package-id=15b64f4a9432e8a6", + "type": "library", + "name": "golang.org/x/sys", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/sys:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/sys@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Af8nKPmuFypiUBjVoU9V20FiaFXOcuZI21p0ycVYYGE=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/text@v0.13.0?package-id=b599bd7087c92e04", + "type": "library", + "name": "golang.org/x/text", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ablQoSUd0tRdKxZewP80B+BaqeKJuVhuRxj/dkrun3k=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/text@v0.13.0?package-id=98b08157ba73ad18", + "type": "library", + "name": "golang.org/x/text", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ablQoSUd0tRdKxZewP80B+BaqeKJuVhuRxj/dkrun3k=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/text@v0.13.0?package-id=5f03397435c9015a", + "type": "library", + "name": "golang.org/x/text", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ablQoSUd0tRdKxZewP80B+BaqeKJuVhuRxj/dkrun3k=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/text@v0.13.0?package-id=5daf43149ec121a7", + "type": "library", + "name": "golang.org/x/text", + "version": "v0.13.0", + "cpe": "cpe:2.3:a:golang:x\\/text:v0.13.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/text@v0.13.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ablQoSUd0tRdKxZewP80B+BaqeKJuVhuRxj/dkrun3k=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/time@v0.3.0?package-id=a7cb354e638de0fb", + "type": "library", + "name": "golang.org/x/time", + "version": "v0.3.0", + "cpe": "cpe:2.3:a:golang:x\\/time:v0.3.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/time@v0.3.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:rg5rLMjNzMS1RkNLzCG38eapWhnYLFYXDXj2gOlr8j4=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/tools@v0.14.0?package-id=572080ba44e11ba2", + "type": "library", + "name": "golang.org/x/tools", + "version": "v0.14.0", + "cpe": "cpe:2.3:a:golang:x\\/tools:v0.14.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/tools@v0.14.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:jvNa2pY0M4r62jkRQ6RwEZZyPcymeL9XZMLBbV7U2nc=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/golang.org/x/xerrors@v0.0.0-20231012003039-104605ab7028?package-id=04bc4e4a2cc1065c", + "type": "library", + "name": "golang.org/x/xerrors", + "version": "v0.0.0-20231012003039-104605ab7028", + "cpe": "cpe:2.3:a:golang:x\\/xerrors:v0.0.0-20231012003039-104605ab7028:*:*:*:*:*:*:*", + "purl": "pkg:golang/golang.org/x/xerrors@v0.0.0-20231012003039-104605ab7028", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:+cNy6SZtPcJQH3LJVLOSmiC7MMxXNOb3PU/VUEz+EhU=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/api@v0.149.0?package-id=07557fdfa606862a", + "type": "library", + "name": "google.golang.org/api", + "version": "v0.149.0", + "cpe": "cpe:2.3:a:google:api:v0.149.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/api@v0.149.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:b2CqT6kG+zqJIVKRQ3ELJVLN1PwHZ6DJ3dW8yl82rgY=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/genproto@v0.0.0-20231016165738-49dd2c1f3d0b?package-id=60dacb54ec4698dc", + "type": "library", + "name": "google.golang.org/genproto", + "version": "v0.0.0-20231016165738-49dd2c1f3d0b", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20231016165738-49dd2c1f3d0b:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20231016165738-49dd2c1f3d0b", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:+YaDE2r2OG8t/z5qmsh7Y+XXwCbvadxxZ0YY6mTdrVA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20231016165738-49dd2c1f3d0b?package-id=d8c733147b2d1a37", + "type": "library", + "name": "google.golang.org/genproto/googleapis/api", + "version": "v0.0.0-20231016165738-49dd2c1f3d0b", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20231016165738-49dd2c1f3d0b:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20231016165738-49dd2c1f3d0b", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:CIC2YMXmIhYw6evmhPxBKJ4fmLbOFtXQN/GV3XOZR8k=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/bytestream@v0.0.0-20231030173426-d783a09b4405?package-id=e08289c2d4e69d7c", + "type": "library", + "name": "google.golang.org/genproto/googleapis/bytestream", + "version": "v0.0.0-20231030173426-d783a09b4405", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20231030173426-d783a09b4405:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto/googleapis/bytestream@v0.0.0-20231030173426-d783a09b4405", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:o4S3HvTUEXgRsNSUQsALDVog0O9F/U1JJlHmmUN8Uas=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20231016165738-49dd2c1f3d0b?package-id=d3cd4f22bc426a63", + "type": "library", + "name": "google.golang.org/genproto/googleapis/rpc", + "version": "v0.0.0-20231016165738-49dd2c1f3d0b", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20231016165738-49dd2c1f3d0b:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20231016165738-49dd2c1f3d0b", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ZlWIi1wSK56/8hn4QcBp/j9M7Gt3U/3hZw3mC7vDICo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20231016165738-49dd2c1f3d0b?package-id=ab6a123f70ceff88", + "type": "library", + "name": "google.golang.org/genproto/googleapis/rpc", + "version": "v0.0.0-20231016165738-49dd2c1f3d0b", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20231016165738-49dd2c1f3d0b:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20231016165738-49dd2c1f3d0b", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ZlWIi1wSK56/8hn4QcBp/j9M7Gt3U/3hZw3mC7vDICo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20231016165738-49dd2c1f3d0b?package-id=ce37abf42415ebd3", + "type": "library", + "name": "google.golang.org/genproto/googleapis/rpc", + "version": "v0.0.0-20231016165738-49dd2c1f3d0b", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20231016165738-49dd2c1f3d0b:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20231016165738-49dd2c1f3d0b", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ZlWIi1wSK56/8hn4QcBp/j9M7Gt3U/3hZw3mC7vDICo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20231016165738-49dd2c1f3d0b?package-id=1508b4bc828958c2", + "type": "library", + "name": "google.golang.org/genproto/googleapis/rpc", + "version": "v0.0.0-20231016165738-49dd2c1f3d0b", + "cpe": "cpe:2.3:a:google:genproto:v0.0.0-20231016165738-49dd2c1f3d0b:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20231016165738-49dd2c1f3d0b", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:ZlWIi1wSK56/8hn4QcBp/j9M7Gt3U/3hZw3mC7vDICo=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.59.0?package-id=66d1dc82e849fab3", + "type": "library", + "name": "google.golang.org/grpc", + "version": "v1.59.0", + "cpe": "cpe:2.3:a:google:grpc:v1.59.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.59.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Z5Iec2pjwb+LEOqzpB2MR12/eKFhDPhuqW91O+4bwUk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.59.0?package-id=4113ce1001bab618", + "type": "library", + "name": "google.golang.org/grpc", + "version": "v1.59.0", + "cpe": "cpe:2.3:a:google:grpc:v1.59.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.59.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Z5Iec2pjwb+LEOqzpB2MR12/eKFhDPhuqW91O+4bwUk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.59.0?package-id=c029f81c541558cf", + "type": "library", + "name": "google.golang.org/grpc", + "version": "v1.59.0", + "cpe": "cpe:2.3:a:google:grpc:v1.59.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.59.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Z5Iec2pjwb+LEOqzpB2MR12/eKFhDPhuqW91O+4bwUk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/grpc@v1.59.0?package-id=b61af932b9ee28dd", + "type": "library", + "name": "google.golang.org/grpc", + "version": "v1.59.0", + "cpe": "cpe:2.3:a:google:grpc:v1.59.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/grpc@v1.59.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:Z5Iec2pjwb+LEOqzpB2MR12/eKFhDPhuqW91O+4bwUk=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.31.0?package-id=98c95115a554da07", + "type": "library", + "name": "google.golang.org/protobuf", + "version": "v1.31.0", + "cpe": "cpe:2.3:a:google:protobuf:v1.31.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/protobuf@v1.31.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:g0LDEJHgrBl9N9r17Ru3sqWhkIx2NB67okBHPwC7hs8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.31.0?package-id=0e5c9df0cfb2c0d2", + "type": "library", + "name": "google.golang.org/protobuf", + "version": "v1.31.0", + "cpe": "cpe:2.3:a:google:protobuf:v1.31.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/protobuf@v1.31.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:g0LDEJHgrBl9N9r17Ru3sqWhkIx2NB67okBHPwC7hs8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.31.0?package-id=4d2d028fa2cfaa47", + "type": "library", + "name": "google.golang.org/protobuf", + "version": "v1.31.0", + "cpe": "cpe:2.3:a:google:protobuf:v1.31.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/protobuf@v1.31.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:g0LDEJHgrBl9N9r17Ru3sqWhkIx2NB67okBHPwC7hs8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/google.golang.org/protobuf@v1.31.0?package-id=de77881b6c7a5ad3", + "type": "library", + "name": "google.golang.org/protobuf", + "version": "v1.31.0", + "cpe": "cpe:2.3:a:google:protobuf:v1.31.0:*:*:*:*:*:*:*", + "purl": "pkg:golang/google.golang.org/protobuf@v1.31.0", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:g0LDEJHgrBl9N9r17Ru3sqWhkIx2NB67okBHPwC7hs8=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/gopkg.in/yaml.v3@v3.0.1?package-id=a46b225bc9db9187", + "type": "library", + "name": "gopkg.in/yaml.v3", + "version": "v3.0.1", + "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/k8s.io/apimachinery@v0.28.3?package-id=847f5e32f9b99920", + "type": "library", + "name": "k8s.io/apimachinery", + "version": "v0.28.3", + "purl": "pkg:golang/k8s.io/apimachinery@v0.28.3", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:B1wYx8txOaCQG0HmYF6nbpU8dg6HvA06x5tEffvOe7A=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/k8s.io/utils@v0.0.0-20230726121419-3b25d923346b?package-id=ae6dae8bcca124d7", + "type": "library", + "name": "k8s.io/utils", + "version": "v0.0.0-20230726121419-3b25d923346b", + "purl": "pkg:golang/k8s.io/utils@v0.0.0-20230726121419-3b25d923346b", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:sgn3ZU783SCgtaSJjpcVVlRqd6GSnlTLKgpAAttJvpI=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/nhooyr.io/websocket@v1.8.7?package-id=433528d83fddd41d", + "type": "library", + "name": "nhooyr.io/websocket", + "version": "v1.8.7", + "purl": "pkg:golang/nhooyr.io/websocket@v1.8.7", + "properties": [ + { + "name": "syft:package:foundBy", + "value": "go-module-binary-cataloger" + }, + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:architecture", "value": "amd64" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" }, + { + "name": "syft:metadata:h1Digest", + "value": "h1:usjR2uOr/zjjkVMy0lW+PPohFok7PCow5sDjLgX4P4g=" + }, + { + "name": "syft:metadata:mainModule", + "value": "github.com/chainloop-dev/chainloop" + } + ] + }, + { + "bom-ref": "pkg:golang/stdlib@1.21.5?package-id=a17c60dc0f72aadc", + "type": "library", + "name": "stdlib", + "version": "go1.21.5", + "licenses": [{ "license": { "id": "BSD-3-Clause" } }], + "cpe": "cpe:2.3:a:golang:go:1.21.5:-:*:*:*:*:*:*", + "purl": "pkg:golang/stdlib@1.21.5", + "properties": [ + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:8d65cdaedd9dd65e98b9eff2a4502d3ebda09cb2335fd9068aa2a1992ed0b809" + }, + { "name": "syft:location:0:path", "value": "/control-plane" }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" } + ] + }, + { + "bom-ref": "pkg:golang/stdlib@1.21.5?package-id=ecd2105513157ff0", + "type": "library", + "name": "stdlib", + "version": "go1.21.5", + "licenses": [{ "license": { "id": "BSD-3-Clause" } }], + "cpe": "cpe:2.3:a:golang:go:1.21.5:-:*:*:*:*:*:*", + "purl": "pkg:golang/stdlib@1.21.5", + "properties": [ + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:32a72dc598558f215d9409c5fe9cb208678ffdffff217794d05b2ebf6c61609d" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-dependency-track" + }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" } + ] + }, + { + "bom-ref": "pkg:golang/stdlib@1.21.5?package-id=1847545f699d9f52", + "type": "library", + "name": "stdlib", + "version": "go1.21.5", + "licenses": [{ "license": { "id": "BSD-3-Clause" } }], + "cpe": "cpe:2.3:a:golang:go:1.21.5:-:*:*:*:*:*:*", + "purl": "pkg:golang/stdlib@1.21.5", + "properties": [ + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:b43f4a154dca1193cb347c0e281045b4ed93c9d669363855d370ed7227247a6a" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-discord-webhook" + }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" } + ] + }, + { + "bom-ref": "pkg:golang/stdlib@1.21.5?package-id=f3fe83501937440f", + "type": "library", + "name": "stdlib", + "version": "go1.21.5", + "licenses": [{ "license": { "id": "BSD-3-Clause" } }], + "cpe": "cpe:2.3:a:golang:go:1.21.5:-:*:*:*:*:*:*", + "purl": "pkg:golang/stdlib@1.21.5", + "properties": [ + { "name": "syft:package:language", "value": "go" }, + { "name": "syft:package:type", "value": "go-module" }, + { + "name": "syft:package:metadataType", + "value": "go-module-buildinfo-entry" + }, + { + "name": "syft:location:0:layerID", + "value": "sha256:7368a17098cee334bed80d6dae37de5974b12805b404ffc5cc045088ca3897b8" + }, + { + "name": "syft:location:0:path", + "value": "/plugins/chainloop-plugin-smtp" + }, + { "name": "syft:metadata:goCompiledVersion", "value": "go1.21.5" } + ] + } + ], + "vulnerabilities": [ + { + "id": "CVE-2025-4949", + "ratings": [ + { + "score": 9.8, + "severity": "critical", + "method": "CVSSv31", + "vector": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "cwes": [ + 827, + 611 + ], + "description": "In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol allowing to store git pack files in an Amazon S3 bucket, are vulnerable to XML External Entity (XXE) attacks when parsing XML files. This vulnerability can lead to information disclosure, denial of service, and other security issues.", + "analysis": { + "state": "in_triage", + "detail": "There are no applicability scanners for this specific CVE" + }, + "affects": [ + { + "ref": "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.10.0.202406032230-r" + } + ] + } + ] +}