{
  "_type": "https://in-toto.io/Statement/v0.1",
  "predicateType": "https://spdx.dev/Document",
  "subject": [
    {
      "name": "docker-compose-linux-s390x",
      "digest": {
        "sha256": "552d11a594aa3d81b4b69a2abd2a5c2e699378038a8efaa8200c0b556be3451f"
      }
    }
  ],
  "predicate": {
    "SPDXID": "SPDXRef-DOCUMENT",
    "creationInfo": {
      "created": "2026-04-15T14:23:17Z",
      "creators": [
        "Organization: Anchore, Inc",
        "Tool: syft-v1.40.0"
      ],
      "licenseListVersion": "3.27"
    },
    "dataLicense": "CC0-1.0",
    "documentNamespace": "https://anchore.com/syft/dir/sbom-binary-9943f9e8-8a27-4448-84e7-45485fb5e3cc",
    "files": [
      {
        "SPDXID": "SPDXRef-File-docker-compose-692def66df504244",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "552d11a594aa3d81b4b69a2abd2a5c2e699378038a8efaa8200c0b556be3451f"
          }
        ],
        "copyrightText": "NOASSERTION",
        "fileName": "docker-compose",
        "fileTypes": [
          "APPLICATION",
          "BINARY"
        ],
        "licenseConcluded": "NOASSERTION",
        "licenseInfoInFiles": [
          "NOASSERTION"
        ]
      }
    ],
    "name": "sbom-binary",
    "packages": [
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-AlecAivazis-survey-v2-efdf0421ca5e0be9",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e88feef05bf2b5d1ac8289eb62c567dadf2de108919e1e90493aa49212224a34"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:AlecAivazis:survey\\/v2:v2.3.7:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/AlecAivazis/survey/v2@v2.3.7",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/AlecAivazis/survey/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.3.7"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-DefangLabs-secret-detector-b35b648238f5b3f2",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "adde1b3af2a60c8c7459e4eff50cfe86086c8328e290588faec7971e529ea4ed"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:DefangLabs:secret-detector:v0.0.0-20250403165618-22662109213e:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:DefangLabs:secret_detector:v0.0.0-20250403165618-22662109213e:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/DefangLabs/secret-detector@v0.0.0-20250403165618-22662109213e",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/DefangLabs/secret-detector",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20250403165618-22662109213e"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-0e79f88b924887e4",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "962719245c36470a4732a78a4c26248adb0fa873714e677848d479afde0518cf"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:acarl005:stripansi:v0.0.0-20180116102854-5a71ef0e047d:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/acarl005/stripansi@v0.0.0-20180116102854-5a71ef0e047d",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/acarl005/stripansi",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20180116102854-5a71ef0e047d"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-buger-goterm-30756677a19a6949",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "67d62f1a63a287cd4fd056d5b44613145e98b1283149428485ffdff5b4cc5db6"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:buger:goterm:v1.0.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/buger/goterm@v1.0.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/buger/goterm",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-08cbc655bb7186a6",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "64df8831aef9dca7d7e6177cbd568c8b18e7a91677cbc0ae24a44a8f5c5cb123"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:cenkalti:backoff\\/v5:v5.0.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/cenkalti/backoff/v5",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v5.0.3"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-a172a17240438cd0",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "50bf35e7153d4aab059626f3ba08338d786883b6cbea85fd05b3599cbd9416fb"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/cespare/xxhash/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.3.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-compose-spec-compose-go-v2-076565f0aa4ed8f0",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "5126b53546c3725fdc8dbf13f62c27b85b273bbf47fb6868d8be528c52b3dee2"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose-spec:compose-go\\/v2:v2.10.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose-spec:compose_go\\/v2:v2.10.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose_spec:compose-go\\/v2:v2.10.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose_spec:compose_go\\/v2:v2.10.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose:compose-go\\/v2:v2.10.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose:compose_go\\/v2:v2.10.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/compose-spec/compose-go/v2@v2.10.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/compose-spec/compose-go/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.10.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-console-a64a8cdf17043dc7",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "474ca635ec9d46a1f60e66a414d7668d1da4d2ded43ee88e57f37fdbbfeaaac7"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:console:v1.0.5:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/console@v1.0.5",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/console",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.5"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-86b32f3c277a25ee",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e67d281d8541c0de158685fd7c5ca4095f5d175fc1bc05de83617c5ba518ab5a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:containerd\\/api:v1.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/containerd/api@v1.10.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/containerd/api",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.10.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-386f9941528fecba",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "98e0512da1c6be6832d1b468d5283a383f2e80c29922f0a859631e30cca09620"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:containerd\\/v2:v2.2.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/containerd/v2@v2.2.3",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/containerd/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.2.3"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-continuity-4be5e2eecfea21f5",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "651a0dd6c5eaf6eed5e90a0731c5561a13b00c5a99e01f62e47eae9f55a1d31e"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:continuity:v0.4.5:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/continuity@v0.4.5",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/continuity",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.4.5"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-4beb5ca103175a64",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "b60e7221f225408af162dbbd6a3a98e365b79694b5f57a9dc5141e130606f0f2"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v1.0.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/errdefs",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-03d2f837ba5a6dce",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "f48289d3a16fc8d95ec56ebdd035ee40dc76280d9c5095f1d79d57771dd93cf1"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:errdefs\\/pkg:v0.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/errdefs/pkg",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.3.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-log-fcdd43edfc6e35e3",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "4c226dee2a0cd9caffb5f47c18f6c67fdfd54405fc0f60783e3cc2a5f5f9e342"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:log:v0.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/log@v0.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/log",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-platforms-5bb77c83314eced9",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "338d89ad44f8cdf653aad914c24af41b399459b7f23b954ed10e5bde8a7ded3e"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:platforms:v1.0.0-rc.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/platforms",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.0-rc.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-88db0ab28f9a0e2d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c5b56ee83e2a1768e285d87dac354e2aa50c88505093a61cb53768d73934f3b6"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:ttrpc:v1.2.8:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/ttrpc@v1.2.8",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/ttrpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.2.8"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-4bf33cabaa22a06b",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c8d03ff78cf159dbd80027583bcce87e1ad356e418ef77c5535cbef9d612c38d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:typeurl\\/v2:v2.2.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/typeurl/v2@v2.2.3",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/typeurl/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.2.3"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-distribution-reference-5ebf2931ce9a3a13",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "d085c2439838fd03071e46ab63387997ebbc4f7b7bdf333942f7eb0f2220c419"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:distribution:reference:v0.6.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/distribution/reference@v0.6.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/distribution/reference",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.6.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-buildx-6982db561f6463ab",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c6e65eb907bf0bfdadbcb0e088803af989eadc515649fb06356207337ab5843f"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:buildx:v0.33.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/buildx@v0.33.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/buildx",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.33.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-cli-d8d42aae67a351ae",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "f888d750b31eb65bd6262b9223435ba2bdfa95c279053715a54981db5281a153"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:cli:v29.4.0\\+incompatible:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/cli@v29.4.0%2Bincompatible",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/cli",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v29.4.0+incompatible"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:compose\\/v5:v5.1.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/compose/v5@v5.1.3",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/compose/v5",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v5.1.3"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-4ffd55cf4878d949",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0c15f4634cc08d96d2ae6d6ecce91daf5a2756084a69fb639525ade0015ec733"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:docker:v28.5.2\\+incompatible:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/docker@v28.5.2%2Bincompatible",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/docker",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v28.5.2+incompatible"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-31e8d22a5b5a0ca2",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "10534df031ef6a22bccd5a850360d3e818d71341b37cb399dfc8203d329e3e46"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.5:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.5:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/docker-credential-helpers",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.9.5"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-connections-780bce2215ecc796",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "2e5306f5acc07b54ea7d1eec3be349b6dcf5832e8a3bb549061fa93268d20fde"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:go-connections:v0.6.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:go_connections:v0.6.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/go-connections@v0.6.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/go-connections",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.6.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-units-2ef5272abe9395ca",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "ebdaf15dc064dbb4af49a6b14ed2e1ffc9657070fcbd81d3ed649d459fe3bebe"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/go-units@v0.5.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/go-units",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.5.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-eiannone-keyboard-e784276d7deb80a1",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "5c10477086f6e7a81426d2e6636da7f7d1da653cfeaf6679d7150f8b4d66df08"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:eiannone:keyboard:v0.0.0-20220611211555-0d226195f203:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/eiannone/keyboard@v0.0.0-20220611211555-0d226195f203",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/eiannone/keyboard",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20220611211555-0d226195f203"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-fe2851078a48ff02",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3454d5d998f56cbe2673db2a5800976d01550418365b718fbeaa7cfc4492d968"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.0.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/felixge/httpsnoop",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-fvbommel-sortorder-4ced05dc580d3b04",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "7d49a87be1cbb014dcb410e8681c29428e4dfa7ac2a7c83f06329bffa650998c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:fvbommel:sortorder:v1.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/fvbommel/sortorder@v1.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/fvbommel/sortorder",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-b0eef5c3acd4a7e9",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0a39c3947abc8a47fa138f76aba78a6e818e0b44fc08368ebe41c2220f227442"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go:logr:v1.4.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.3",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/go-logr/logr",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.4.3"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-f006b55606292bd1",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8525b11e8a93816d92daa19cd0b4c0239eb7299e582984614f730529931b8da8"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/go-logr/stdr",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.2.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-ed2e417d1dc1734e",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "bcce48268500cb777bcd1495b48c108018fb0625ad30f7e63c48005e7be3d51a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/go-viper/mapstructure/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.5.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-gofrs-flock-82d63af237487f38",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "f792689583af18ca9e1f7d7e142ec3dbeb942dfea61bad66119fc0f1d458333c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:gofrs:flock:v0.13.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/gofrs/flock@v0.13.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/gofrs/flock",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.13.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-gogo-protobuf-fd6195ec5db3d99d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3afd5cbdce7c505ddbe578c19d9bfbfa8a5c4dc40565e6d88d6ce2df8bdd9b84"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:gogo:protobuf:v1.3.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/gogo/protobuf@v1.3.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/gogo/protobuf",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.3.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-f67ec57d630f358e",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "a6fe00b0a08a299baa960b39b149a7e31f149466b490456dfe9b93a4ac7dbefa"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang-jwt:jwt\\/v5:v5.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang_jwt:jwt\\/v5:v5.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:jwt\\/v5:v5.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/golang-jwt/jwt/v5",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v5.3.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-golang-protobuf-45840c9a7044292f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8bb7892fca994e94845ce3d3c4d2a1012629327fbc7b943a01d9dd55ad5d59e9"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:protobuf:v1.5.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/golang/protobuf@v1.5.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/golang/protobuf",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.5.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-cmp-263b837a4a4658ca",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c24f37f36113b2fe0961467022c9fa6296225a206c60b489893b320726d5b8df"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/google/go-cmp@v0.7.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/google/go-cmp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.7.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-google-shlex-d832cfc8b069eac8",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "125e8ce244d308e87a68188a694186ee861348f3fc331a8be182379192b070fe"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:shlex:v0.0.0-20191202100458-e7afc7fbc510:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/google/shlex@v0.0.0-20191202100458-e7afc7fbc510",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/google/shlex",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20191202100458-e7afc7fbc510"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-f7bff905538bb765",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "348bda24330eb231c0f27d630212d2833ac0cf2d4782bfa136b6f9edefbde05d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/google/uuid",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.6.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-8a0a0dad33f042f8",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1d6461e51dbef4489f33220757b655f8c219aa0cfe3cca59d782729efdced99b"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc-ecosystem:grpc-gateway\\/v2:v2.28.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc-ecosystem:grpc_gateway\\/v2:v2.28.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc_ecosystem:grpc-gateway\\/v2:v2.28.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc_ecosystem:grpc_gateway\\/v2:v2.28.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc:grpc-gateway\\/v2:v2.28.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc:grpc_gateway\\/v2:v2.28.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.28.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.28.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-03324905ddd25a6f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3b1ace7a1ef91145cc63c4c18da8367f35c6678d0b07a20ac38e587865036362"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/hashicorp/errwrap",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-714bc4a5bd6dd3fe",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "d37e452982168e650bc8544128fb3c4c14288b4c7a77d1b8c5cf677972560194"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/hashicorp/go-cleanhttp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.5.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-cd18372c69be7d31",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1f90e412d7fa097745a74374126e540b04295cc5a47bc200d3e943e3c6b0318a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/hashicorp/go-multierror",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-508a56b7ce3fa10a",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "09e388cfa93e2e8377a97f59d2dc90acfb620750c56113df08806d6973d20a70"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go-version:v1.9.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go_version:v1.9.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/hashicorp/go-version@v1.9.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/hashicorp/go-version",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.9.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-in-toto-attestation-abf84024764e5467",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "301167ea5b0caba769b506490616a55d371631bfda272dd5f865f75588ff5751"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in-toto:attestation:v1.1.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in_toto:attestation:v1.1.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in:attestation:v1.1.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/in-toto/attestation@v1.1.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/in-toto/attestation",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-in-toto-in-toto-golang-4eb5e8c396e55204",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "facd9e65048add69967d857ce6a5d54817ea81ac22ff92f4d8c6aa038a3fb693"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in-toto:in-toto-golang:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in-toto:in_toto_golang:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in_toto:in-toto-golang:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in_toto:in_toto_golang:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in:in-toto-golang:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in:in_toto_golang:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/in-toto/in-toto-golang@v0.10.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/in-toto/in-toto-golang",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.10.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-inhies-go-bytesize-b986f44627e25edc",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "16d123f2c7c871a6817c02ab1350b06fad580ed62af49c4284ad5cec029c7bbb"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:inhies:go-bytesize:v0.0.0-20220417184213-4913239db9cf:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:inhies:go_bytesize:v0.0.0-20220417184213-4913239db9cf:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/inhies/go-bytesize@v0.0.0-20220417184213-4913239db9cf",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/inhies/go-bytesize",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20220417184213-4913239db9cf"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-20550357ed9e49a7",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1f287d03cbb9d64a6d76447e72a4694f511e6c1c139f5a0af587c661b745cfa2"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:jonboulle:clockwork:v0.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/jonboulle/clockwork@v0.5.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/jonboulle/clockwork",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.5.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-kballard-go-shellquote-80c7c28a9f33cece",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "67d9f61453545ecb217f024c060340d1153afe2ed655a01e82fdcfb6e2073ccb"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:kballard:go-shellquote:v0.0.0-20180428030007-95032a82bc51:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:kballard:go_shellquote:v0.0.0-20180428030007-95032a82bc51:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/kballard/go-shellquote@v0.0.0-20180428030007-95032a82bc51",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/kballard/go-shellquote",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20180428030007-95032a82bc51"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-compress-ee83aff9492825b6",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "fe1d601f909ef9558d2d25aa3f33959fa5c13bebc96c2346be3a1a181156d881"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:klauspost:compress:v1.18.5:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/klauspost/compress@v1.18.5",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/klauspost/compress",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.18.5"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-5f3c77ec00cbacc6",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "f40f4b1d2a85ffb7725555fa83453d7309bda46de43fd812cdcb883c73ec6881"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go-colorable:v0.1.14:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go_colorable:v0.1.14:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mattn/go-colorable@v0.1.14",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mattn/go-colorable",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.1.14"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-acf07733db9ee522",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c5f0f4883b842a70e4974deae258a607ebc7f86c4b12d2ff8dbe315494965846"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go-isatty:v0.0.20:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go_isatty:v0.0.20:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mattn/go-isatty@v0.0.20",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mattn/go-isatty",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.20"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-2a146ede9b976ae0",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "13949c34cb62c2f96f079a5a305770f69e24490cdb5c58a42794903ba4d42d07"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go-runewidth:v0.0.16:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go_runewidth:v0.0.16:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mattn/go-runewidth@v0.0.16",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mattn/go-runewidth",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.16"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-c214269aee06689d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "336cc69bb116e94409bc3790c68e13e7578a3eeadb7856def16b5e6c6136c6b9"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go-shellwords:v1.0.12:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go_shellwords:v1.0.12:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mattn/go-shellwords@v1.0.12",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mattn/go-shellwords",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.12"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mgutz-ansi-4a53068b0b8a00f9",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8fbfb51e90054b5cf2e7e438ab1d5f5a1f748132b088de10086a18f535b2c8ee"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mgutz:ansi:v0.0.0-20170206155736-9520e82c474b:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20170206155736-9520e82c474b",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mgutz/ansi",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20170206155736-9520e82c474b"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-hashstructure-v2-9ecc7b518f0ba6bf",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "bc6296974609a9437113c77e87c7fa3492dc089ae06e10b835c0f8e8a6af0dde"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mitchellh:hashstructure\\/v2:v2.0.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mitchellh/hashstructure/v2@v2.0.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mitchellh/hashstructure/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.0.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-buildkit-bba05f1d9519f8b2",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c312c415b08e267b440e348d34dd9859df33c65b59c53e66b834342f3a5bb695"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:buildkit:v0.29.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/buildkit@v0.29.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/buildkit",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.29.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-bb8f345027070cb6",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8cc29f7f7c3a3e06df49aebd19f360fb337f5cb85f5c91a7131dcd97612c14fd"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:docker-image-spec:v1.3.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:docker_image_spec:v1.3.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/docker-image-spec",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.3.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-go-archive-44d02dd239d3cf1d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "ce0e500d43369a2d0920cf5f7506560bb53cfb665f8b17d36281cbeeb59470ff"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:go-archive:v0.2.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:go_archive:v0.2.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/go-archive@v0.2.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/go-archive",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.2.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-locker-e3e1ca7cf95ec9d1",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "7ce5ea478d737af7a0e1f14e0e2c7ed428789a3fe04f4344d5725ba7f7a9b818"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:locker:v1.0.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/locker@v1.0.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/locker",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-api-4ba69896e4f2d1fd",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "4ea573b8990e2ec80b0c3c0d2e662a00252e4de84e1d118a88f86f1fc577367e"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:moby\\/api:v1.54.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/moby/api@v1.54.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/moby/api",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.54.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-client-661a43ab4d18605c",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "4bed977a0cc742baef4c2bc5eace4717372bcb05909ae56784e5deda48968c8c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:moby\\/client:v0.4.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/moby/client@v0.4.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/moby/client",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.4.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-59fdddc7b0e21398",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "aa586d69f9abea480c2098ca24c0e6316abb58b90a228db786cae9477c74f385"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:patternmatcher:v0.6.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/patternmatcher@v0.6.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/patternmatcher",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.6.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-83a0e2a2a5dff656",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "930e43fc4aa4070b01162d2cb3dbf5546df0224561cc6bcb92527ec37035e12c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/atomicwriter:v0.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/atomicwriter@v0.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/atomicwriter",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-capability-d5ca6c58be109352",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e03e2623a2a536d58c08cd59fcad22ed15751645fe0c10c72952690a7759a079"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/capability:v0.4.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/capability@v0.4.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/capability",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.4.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-dc29423ea4bf317b",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "aabc7b5c551dff90f1b6a7281f5878dfc845e5398ebf30bf96ca63cbbce0bc25"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/sequential:v0.6.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/sequential@v0.6.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/sequential",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.6.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-signal-c2291dcf09c8eb59",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3eb43176fc5c1a28dda3a5175e8fe553f4ef1d45b23e18fb50ea52a3cb6ebe4d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/signal:v0.7.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/signal@v0.7.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/signal",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.7.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-symlink-652241ec8de5df37",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1995fcf66119f6ee777fdee7a41cb845cdef24a8fb2410e3fcf376236d86acd5"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/symlink:v0.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/symlink@v0.3.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/symlink",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.3.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-user-3e0eacb57af7e689",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8e170c2a2b7b480f34862be614971b075bea9b0fffc14eb565dba2d9e417b8cb"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/user:v0.4.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/user@v0.4.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/user",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.4.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-userns-761c3fae2de6046c",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "b552d79053b156ef40eb8ff2879f6c94756ff5a84ef5421ebf8259bac38b1bf8"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/userns:v0.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/userns@v0.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/userns",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-term-d3009d9cc4416a5c",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "eaa9371490050ecea2feadd6fe943ded25f5f76a8a7d98068c242a7c22648334"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:term:v0.5.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/term@v0.5.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/term",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.5.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-morikuni-aec-6da276ebd844379e",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "bc1065d29527be2fc97bbd5db11ae1301b6b788a8d31812b4806c479bf23ad74"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:morikuni:aec:v1.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/morikuni/aec@v1.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/morikuni/aec",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-a099f1f5f9dbc467",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "6a93945ace755b93e586ec86cb3f4509e78120e50303fea75bc3a2ff23a18795"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/opencontainers/go-digest",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-25937fa5b875c1a2",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "cb47d49457c86613c5d56e77ed738b834fdf731eb3707089c28a02db1240d38d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/opencontainers/image-spec",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-5122afa1f6915fdd",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "9b27bd5ee850ea0be7e61dbcf958a52abacfa1055a9f0e4f330fd3074b7911ce"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:pelletier:go-toml\\/v2:v2.2.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:pelletier:go_toml\\/v2:v2.2.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/pelletier/go-toml/v2@v2.2.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/pelletier/go-toml/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.2.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-errors-c14f280f0ca0d5de",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "14404bc75cd2db5e28c298f2eeab017a2c5b51192e850030acae54c0b193c2de"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/pkg/errors",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.9.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-3dab304795dfe883",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "18508a826a74b5e714274b09bafe29cd80aa4bdf911929f9d8cdc55303ecfaea"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:planetscale:vtprotobuf:v0.6.1-0.20240319094008-0393e58bdf10:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/planetscale/vtprotobuf",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.6.1-0.20240319094008-0393e58bdf10"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-rivo-uniseg-060604cb9dc248ab",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "59476f916f2e121ad87cb0b8673769236cedc4fd48e7cdbee3d39ce4cabae154"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:rivo:uniseg:v0.4.7:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/rivo/uniseg@v0.4.7",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/rivo/uniseg",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.4.7"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-cd63feb540ba911e",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3ca2bd0f21f189fe0b668fae41281736ab348e3e7ec59c307ca1e0a61da5c41c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:santhosh-tekuri:jsonschema\\/v6:v6.0.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:santhosh_tekuri:jsonschema\\/v6:v6.0.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:santhosh:jsonschema\\/v6:v6.0.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/santhosh-tekuri/jsonschema/v6",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v6.0.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-4a27178ef30c3d0c",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "97e1f912b716d0f01e84136b071a06bf58e3369198759f51721785901d96235e"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure:go-securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure:go_securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.10.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/secure-systems-lab/go-securesystemslib",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.10.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-shibumi-go-pathspec-827a4b2e85044484",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "414c8c661168d0c77907ccd5f31dad7aca216dbe647dba538bdac19ca8797642"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:shibumi:go-pathspec:v1.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:shibumi:go_pathspec:v1.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/shibumi/go-pathspec",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.3.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-417ac5a9f1b08014",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "cad3a6c4c80b75c51e777c3549b6d93a0731ab0306eb5961d539992cdf967991"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:sigstore:sigstore:v1.10.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/sigstore/sigstore@v1.10.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/sigstore/sigstore",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.10.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-go-90c9a56ff1e26993",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c134ec8021ce7ea884cd5c81600ea60dccc6b4190dedc33c98fa63263e50bcc8"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:sigstore:sigstore-go:v1.1.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:sigstore:sigstore_go:v1.1.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/sigstore/sigstore-go@v1.1.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/sigstore/sigstore-go",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-5f161bc5155b2aed",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "4ec644ee5d75cc508b66767eb5e1f8526a2ae4184421f2337d10d9d54cea976c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:sirupsen:logrus:v1.9.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/sirupsen/logrus@v1.9.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/sirupsen/logrus",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.9.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-skratchdot-open-golang-8ec591a3d58582c1",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "24802eab71047fd7206d4e80b463cae024c6dd97fa08a30da9fd0c1d38200140"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:skratchdot:open-golang:v0.0.0-20200116055534-eef842397966:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:skratchdot:open_golang:v0.0.0-20200116055534-eef842397966:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/skratchdot/open-golang@v0.0.0-20200116055534-eef842397966",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/skratchdot/open-golang",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20200116055534-eef842397966"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cobra-410f807c86ed4ca6",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0cc4d3a27c799bae4873418ea11636735e9609b1f138ec3ac717b3b8b681a5c5"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/spf13/cobra",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.10.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-1b2dc66bf9a32c3d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e04061d8a01807068e363e9bd987b51a21dfc23ab244ea05e11c183bebcfc059"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/spf13/pflag",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.10"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tilt-dev-fsnotify-b5a091c563066f05",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "401e78049c00eb1f1053d9c7637c49499476917f5b82965e91128690b4e61170"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tilt-dev:fsnotify:v1.4.8-0.20220602155310-fff9c274a375:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tilt_dev:fsnotify:v1.4.8-0.20220602155310-fff9c274a375:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tilt:fsnotify:v1.4.8-0.20220602155310-fff9c274a375:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tilt-dev/fsnotify@v1.4.8-0.20220602155310-fff9c274a375",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tilt-dev/fsnotify",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.4.8-0.20220602155310-fff9c274a375"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-53bfc9e2638ba209",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "af4a7b7cae7a97c58f7aab8e691de2f4b06a7cfb447572106d44f34f9e62a93e"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:dchapes-mode:v0.0.0-20250318174251-73d941a28323:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:dchapes_mode:v0.0.0-20250318174251-73d941a28323:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tonistiigi/dchapes-mode@v0.0.0-20250318174251-73d941a28323",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tonistiigi/dchapes-mode",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20250318174251-73d941a28323"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-fsutil-16d64425fbca44aa",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "67834443ceaa165d661ee0aef60c1c13e1180b00ca7d70185d96dd217cb19840"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:fsutil:v0.0.0-20251211185533-a2aa163d723f:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tonistiigi/fsutil@v0.0.0-20251211185533-a2aa163d723f",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tonistiigi/fsutil",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20251211185533-a2aa163d723f"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-go-csvvalue-63b2f67a0f04f676",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "d9fdf4e01d742da65d07c9245446a85ef00c55a9f6b65f4088ae06d2876342d1"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:go-csvvalue:v0.0.0-20240814133006-030d3b2625d0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:go_csvvalue:v0.0.0-20240814133006-030d3b2625d0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tonistiigi/go-csvvalue@v0.0.0-20240814133006-030d3b2625d0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tonistiigi/go-csvvalue",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20240814133006-030d3b2625d0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-units-8dbd3ce20fcf5719",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "4978532c4ea96fa7a577fbff7029dd2b400ca6dd7089515bfd8626a81dff406d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:units:v0.0.0-20180711220420-6950e57a87ea:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tonistiigi/units@v0.0.0-20180711220420-6950e57a87ea",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tonistiigi/units",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20180711220420-6950e57a87ea"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-vt100-8e62aa55ee3bc77d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1fa689d32290d20178f506f6cf9848d541f1490b7824ccb179b151d792a7029c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:vt100:v0.0.0-20240514184818-90bafcd6abab:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tonistiigi/vt100@v0.0.0-20240514184818-90bafcd6abab",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tonistiigi/vt100",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20240514184818-90bafcd6abab"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-xhit-go-str2duration-v2-cb78e11522b27768",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "971925734d83ae1eb29ea5fe0dd3f2a79a4228b510a514fc6e9f1876ed81b2d7"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:xhit:go-str2duration\\/v2:v2.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:xhit:go_str2duration\\/v2:v2.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/xhit/go-str2duration/v2@v2.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/xhit/go-str2duration/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-4e728e339d58f061",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8d7b272782e69ea775d64c24055d8b80ba053192a2cdb0a2e5f359fe2a5a67ae"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/auto/sdk",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.2.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-3f65e70fa2af0fe1",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "607e20f2542ba1a8ea53059babfb6bd905f52459845da0cb806f9ec3d6cb316a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/google.golang.org\\/grpc\\/otelgrpc:v0.63.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.63.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.63.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-httptrace-otelhttptrace-31c7f9e6b3a5e08c",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "da99fb3b331ec2661188db6fd5da199cba3780e35c9cc1e516798e47c560b7ef"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/httptrace\\/otelhttptrace:v0.63.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.63.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.63.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-9d483de4559a6a68",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "45b2aaf011b4148f0e8978417dc46daaa1dc65c91afa053772c90db9fd39475f"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.63.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.63.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.63.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-5840b10df67dffde",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "952406cd3815477fac8090c053feff64c8cdf59faf522a7b95e6aa04acb8b21a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.42.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.42.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetricgrpc-22c26ca9f1ee2f4a",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "31d2ae70f97f1dbcdc9165848ac88da8c3e146b00e417f2be234ee1abeb7ea09"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:exporters\\/otlp\\/otlpmetric\\/otlpmetricgrpc:v1.42.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc@v1.42.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.42.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetrichttp-7be093699c2dcb8c",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1fb3ba46518e3138b3ca5dd1d3c2a7e6974cd3a6e71fca2c7128fba35d6d98b0"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:exporters\\/otlp\\/otlpmetric\\/otlpmetrichttp:v1.42.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.42.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.42.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-150ee450b1ae2cca",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "4c7b998b0a5066e1cfba5eb9c3859cc049e45f6408b8c4fe505a0eaf282da09c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:exporters\\/otlp\\/otlptrace:v1.42.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.42.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.42.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracegrpc-c1a121196a605676",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "cd65ab07553a9ea852fe4eb3601ef80a3469ba28ad46d2cb8baf1572098e12da"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:exporters\\/otlp\\/otlptrace\\/otlptracegrpc:v1.42.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.42.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.42.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracehttp-86f05797307d2d19",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "b8b5cffb79a085f31fed7995e0f9067c58452ae356a02befc79c0fff0397a34a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:exporters\\/otlp\\/otlptrace\\/otlptracehttp:v1.42.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.42.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.42.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-c8ca4b4dbd17c16d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "da35c6fb7a192cd5c43df3669e9c4a0de66c148e68e09fa7cfac5495a15d17fe"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:metric:v1.42.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.42.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/metric",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.42.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-38c68b58198abd8f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "2f20bcfa3aa4e9427076b23ff15c9d02afe1be414a347655216bac9495d8b03a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:sdk:v1.42.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.42.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/sdk",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.42.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-3d2bfc2272742e56",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0ffd50478e82973e9a8f26771bc4a03654c9281746a7ce2af51282019dd81ae0"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:sdk\\/metric:v1.42.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.42.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/sdk/metric",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.42.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-76eb89a55611a649",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3940a020fb7e9b33a76944e939070188cfcf2d0fcea7ba2aea0e0b7a72e63986"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:trace:v1.42.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.42.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/trace",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.42.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-proto-otlp-edb8e2e3e90d12ba",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "97bd3a8c23084d5a2e3cea849e28b67c802e3b721518144f5792028dc7916ff0"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:proto:otlp:v1.9.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.9.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/proto/otlp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.9.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.uber.org-mock-b56d7b22ca7dc6e0",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "87217d75f99b8085f911f39d6aca8bb160fac6aa4d6655db94b07f0db9f0bf76"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.uber.org/mock@v0.6.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.uber.org/mock",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.6.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-f489bc0b599d372b",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "50fe3ebfa7c5ac121bd65f77e1b0e5fff9a69e82191032b489d835f8022f5f95"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:yaml:v4:v4.0.0-rc.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.yaml.in/yaml/v4@v4.0.0-rc.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.yaml.in/yaml/v4",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v4.0.0-rc.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-112e653d26186825",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "fd547356a8914a0827858ee0351c4f6ae110e43af0f6168a74cd23a9f70216db"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go:ssh:v0.48.0:*:*:*:*:go:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.48.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/crypto",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.48.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-24a8a778f90fde0f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "f7847f1933bb9addffe3020aa5c4798241a644b3ae13fda1346796abf181205a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:networking:v0.51.0:*:*:*:*:go:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/net@v0.51.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/net",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.51.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-9f85ab376bfedae1",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "7b43d3a5bee98cef0602d4ecd9d43a8d86b905662532e5f4e3b0dca3fa48b4ee"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.20.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/sync@v0.20.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/sync",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.20.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-33896b384206f498",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "a26addda7025c93e444917422d8766dfe7cc7cd144ffe45fe1b0c840899125ea"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.42.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/sys@v0.42.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/sys",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.42.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-term-e569e138a83f0a35",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "40280fb28fd0dd14c9c764e1e1b0cba8c2f85ba88989a5c5ab6fdfb50175dd85"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:x\\/term:v0.41.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/term@v0.41.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/term",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.41.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-aa94b2123569a3f8",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "a0bfd0ab429d6aac5ad4a6cd78c2b042ad2b78b082685b6abb678db9278d1db9"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:text:v0.34.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/text@v0.34.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/text",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.34.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-time-766ce897016bb12d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "311c7851a2eb0e8b5429474222accf0b8f2dd58f6100d14a211a4dc7e4def0f2"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:x\\/time:v0.14.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/time@v0.14.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/time",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.14.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-06cc9b9fc7236725",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "24b4329c7fcb0477c24d26c35a5fa9cbc0be460fe4d4e547df17dc6a200db85d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260209200024-4cfbd4190f57:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260209200024-4cfbd4190f57",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "google.golang.org/genproto/googleapis/api",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20260209200024-4cfbd4190f57"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-880e649a302bdfca",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "9963c28c3132b2195063306930d1da1287fa517d4f98771a50e0d4cb0434b9a7"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260209200024-4cfbd4190f57:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260209200024-4cfbd4190f57",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "google.golang.org/genproto/googleapis/rpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20260209200024-4cfbd4190f57"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-aba81de3f0e1e71c",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "5ebea6d9699664b113bd436f21499e0f93806a0330dc588a98c953755896b073"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:grpc:v1.80.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.80.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "google.golang.org/grpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.80.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-46b50a692d1dcfc8",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "7d5e99c21368703c812cad1d8fe7e0f1e92d7157a0041b84a25a5b4d0c813551"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.11:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.11",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "google.golang.org/protobuf",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.36.11"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-gopkg.in-ini.v1-8698590947442ece",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0e09f1fbafa77c4f887f38d410848d7b274f261f405cd36c59b18ff4acc2b0e0"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/gopkg.in/ini.v1@v1.67.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "gopkg.in/ini.v1",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.67.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-e7a2518333532f15",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "7f1566fc6cc0cc45aa2c7baf72d23dd4a4bd8613669963a85aed174d8252ec20"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "gopkg.in/yaml.v3",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v3.0.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-gotest.tools-v3-f7ad3586e7fc9745",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "ee4a107c829dcbe23c5137adc9c814a975920f0a60bf5f7729afaa46c98163c4"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/gotest.tools/v3@v3.5.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "gotest.tools/v3",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v3.5.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-stdlib-6f467d95de240134",
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:go:1.25.8:-:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/stdlib@1.25.8",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "BSD-3-Clause",
        "name": "stdlib",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "go1.25.8"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-84f151a5180ae567",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "467c4d87117524ebba089515a5eb5362fad71ddc70f63f63158819a48f9a9d26"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/tags.cncf.io/container-device-interface@v1.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "tags.cncf.io/container-device-interface",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.0"
      },
      {
        "SPDXID": "SPDXRef-DocumentRoot-Directory-sbom-binary",
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "sbom-binary",
        "primaryPackagePurpose": "FILE",
        "supplier": "NOASSERTION"
      }
    ],
    "relationships": [
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-03324905ddd25a6f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-03d2f837ba5a6dce"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-rivo-uniseg-060604cb9dc248ab"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-06cc9b9fc7236725"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-compose-spec-compose-go-v2-076565f0aa4ed8f0"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-08cbc655bb7186a6"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-0e79f88b924887e4"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-112e653d26186825"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-150ee450b1ae2cca"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-fsutil-16d64425fbca44aa"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-1b2dc66bf9a32c3d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-20550357ed9e49a7"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetricgrpc-22c26ca9f1ee2f4a"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-24a8a778f90fde0f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-25937fa5b875c1a2"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-263b837a4a4658ca"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-2a146ede9b976ae0"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-2ef5272abe9395ca"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-buger-goterm-30756677a19a6949"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-httptrace-otelhttptrace-31c7f9e6b3a5e08c"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-31e8d22a5b5a0ca2"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-33896b384206f498"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-386f9941528fecba"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-38c68b58198abd8f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-3d2bfc2272742e56"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-3dab304795dfe883"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-3e0eacb57af7e689"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-3f65e70fa2af0fe1"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-410f807c86ed4ca6"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-417ac5a9f1b08014"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-go-archive-44d02dd239d3cf1d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-golang-protobuf-45840c9a7044292f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-46b50a692d1dcfc8"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-4a27178ef30c3d0c"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mgutz-ansi-4a53068b0b8a00f9"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-4ba69896e4f2d1fd"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-continuity-4be5e2eecfea21f5"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-4beb5ca103175a64"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-4bf33cabaa22a06b"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-fvbommel-sortorder-4ced05dc580d3b04"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-4e728e339d58f061"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-in-toto-golang-4eb5e8c396e55204"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-4ffd55cf4878d949"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-508a56b7ce3fa10a"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-5122afa1f6915fdd"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-53bfc9e2638ba209"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-5840b10df67dffde"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-59fdddc7b0e21398"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-5bb77c83314eced9"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-5ebf2931ce9a3a13"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-5f161bc5155b2aed"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-5f3c77ec00cbacc6"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-go-csvvalue-63b2f67a0f04f676"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-symlink-652241ec8de5df37"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-661a43ab4d18605c"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-buildx-6982db561f6463ab"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-morikuni-aec-6da276ebd844379e"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-stdlib-6f467d95de240134"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-714bc4a5bd6dd3fe"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-761c3fae2de6046c"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-766ce897016bb12d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-76eb89a55611a649"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-780bce2215ecc796"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetrichttp-7be093699c2dcb8c"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-kballard-go-shellquote-80c7c28a9f33cece"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-shibumi-go-pathspec-827a4b2e85044484"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-gofrs-flock-82d63af237487f38"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-83a0e2a2a5dff656"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-84f151a5180ae567"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-gopkg.in-ini.v1-8698590947442ece"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-86b32f3c277a25ee"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracehttp-86f05797307d2d19"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-880e649a302bdfca"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-88db0ab28f9a0e2d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-8a0a0dad33f042f8"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-units-8dbd3ce20fcf5719"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-vt100-8e62aa55ee3bc77d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-skratchdot-open-golang-8ec591a3d58582c1"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-go-90c9a56ff1e26993"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-9d483de4559a6a68"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-hashstructure-v2-9ecc7b518f0ba6bf"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-9f85ab376bfedae1"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-a099f1f5f9dbc467"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-a172a17240438cd0"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-console-a64a8cdf17043dc7"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-aa94b2123569a3f8"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-aba81de3f0e1e71c"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-attestation-abf84024764e5467"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-acf07733db9ee522"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-b0eef5c3acd4a7e9"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-DefangLabs-secret-detector-b35b648238f5b3f2"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.uber.org-mock-b56d7b22ca7dc6e0"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tilt-dev-fsnotify-b5a091c563066f05"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-inhies-go-bytesize-b986f44627e25edc"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-bb8f345027070cb6"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-buildkit-bba05f1d9519f8b2"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-c14f280f0ca0d5de"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracegrpc-c1a121196a605676"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-c214269aee06689d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-signal-c2291dcf09c8eb59"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-c8ca4b4dbd17c16d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-xhit-go-str2duration-v2-cb78e11522b27768"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-cd18372c69be7d31"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-cd63feb540ba911e"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-term-d3009d9cc4416a5c"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-capability-d5ca6c58be109352"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-shlex-d832cfc8b069eac8"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-d8d42aae67a351ae"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-dc29423ea4bf317b"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-locker-e3e1ca7cf95ec9d1"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-e569e138a83f0a35"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-eiannone-keyboard-e784276d7deb80a1"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-e7a2518333532f15"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-ed2e417d1dc1734e"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-proto-otlp-edb8e2e3e90d12ba"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-ee83aff9492825b6"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-AlecAivazis-survey-v2-efdf0421ca5e0be9"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-f006b55606292bd1"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-f489bc0b599d372b"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-f67ec57d630f358e"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-gotest.tools-v3-f7ad3586e7fc9745"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-f7bff905538bb765"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-fcdd43edfc6e35e3"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-gogo-protobuf-fd6195ec5db3d99d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-fe2851078a48ff02"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-03324905ddd25a6f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-03d2f837ba5a6dce"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-rivo-uniseg-060604cb9dc248ab"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-06cc9b9fc7236725"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-compose-spec-compose-go-v2-076565f0aa4ed8f0"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-08cbc655bb7186a6"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-0e79f88b924887e4"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-112e653d26186825"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-150ee450b1ae2cca"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-fsutil-16d64425fbca44aa"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-1b2dc66bf9a32c3d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-20550357ed9e49a7"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetricgrpc-22c26ca9f1ee2f4a"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-24a8a778f90fde0f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-25937fa5b875c1a2"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-263b837a4a4658ca"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-2a146ede9b976ae0"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-2ef5272abe9395ca"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-buger-goterm-30756677a19a6949"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-httptrace-otelhttptrace-31c7f9e6b3a5e08c"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-31e8d22a5b5a0ca2"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-33896b384206f498"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-386f9941528fecba"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-38c68b58198abd8f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-3d2bfc2272742e56"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-3dab304795dfe883"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-3e0eacb57af7e689"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-3f65e70fa2af0fe1"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-410f807c86ed4ca6"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-417ac5a9f1b08014"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-go-archive-44d02dd239d3cf1d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-golang-protobuf-45840c9a7044292f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-46b50a692d1dcfc8"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-4a27178ef30c3d0c"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mgutz-ansi-4a53068b0b8a00f9"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-4ba69896e4f2d1fd"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-continuity-4be5e2eecfea21f5"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-4beb5ca103175a64"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-4bf33cabaa22a06b"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-fvbommel-sortorder-4ced05dc580d3b04"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-4e728e339d58f061"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-in-toto-golang-4eb5e8c396e55204"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-4ffd55cf4878d949"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-508a56b7ce3fa10a"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-5122afa1f6915fdd"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-53bfc9e2638ba209"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-5840b10df67dffde"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-59fdddc7b0e21398"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-5bb77c83314eced9"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-5ebf2931ce9a3a13"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-5f161bc5155b2aed"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-5f3c77ec00cbacc6"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-go-csvvalue-63b2f67a0f04f676"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-symlink-652241ec8de5df37"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-661a43ab4d18605c"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-buildx-6982db561f6463ab"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-morikuni-aec-6da276ebd844379e"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-stdlib-6f467d95de240134"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-714bc4a5bd6dd3fe"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-761c3fae2de6046c"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-766ce897016bb12d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-76eb89a55611a649"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-780bce2215ecc796"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetrichttp-7be093699c2dcb8c"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-kballard-go-shellquote-80c7c28a9f33cece"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-shibumi-go-pathspec-827a4b2e85044484"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-gofrs-flock-82d63af237487f38"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-83a0e2a2a5dff656"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-84f151a5180ae567"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-gopkg.in-ini.v1-8698590947442ece"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-86b32f3c277a25ee"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracehttp-86f05797307d2d19"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-880e649a302bdfca"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-88db0ab28f9a0e2d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-8a0a0dad33f042f8"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-units-8dbd3ce20fcf5719"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-vt100-8e62aa55ee3bc77d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-skratchdot-open-golang-8ec591a3d58582c1"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-go-90c9a56ff1e26993"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-9d483de4559a6a68"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-hashstructure-v2-9ecc7b518f0ba6bf"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-9f85ab376bfedae1"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-a099f1f5f9dbc467"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-a172a17240438cd0"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-console-a64a8cdf17043dc7"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-aa94b2123569a3f8"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-aba81de3f0e1e71c"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-attestation-abf84024764e5467"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-acf07733db9ee522"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-b0eef5c3acd4a7e9"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-DefangLabs-secret-detector-b35b648238f5b3f2"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.uber.org-mock-b56d7b22ca7dc6e0"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tilt-dev-fsnotify-b5a091c563066f05"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-inhies-go-bytesize-b986f44627e25edc"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-bb8f345027070cb6"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-buildkit-bba05f1d9519f8b2"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-c14f280f0ca0d5de"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracegrpc-c1a121196a605676"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-c214269aee06689d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-signal-c2291dcf09c8eb59"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-c8ca4b4dbd17c16d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-xhit-go-str2duration-v2-cb78e11522b27768"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-cd18372c69be7d31"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-cd63feb540ba911e"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-term-d3009d9cc4416a5c"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-capability-d5ca6c58be109352"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-shlex-d832cfc8b069eac8"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-d8d42aae67a351ae"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-dc29423ea4bf317b"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-locker-e3e1ca7cf95ec9d1"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-e569e138a83f0a35"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-eiannone-keyboard-e784276d7deb80a1"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-e7a2518333532f15"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-ed2e417d1dc1734e"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-proto-otlp-edb8e2e3e90d12ba"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-ee83aff9492825b6"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-AlecAivazis-survey-v2-efdf0421ca5e0be9"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-f006b55606292bd1"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-f489bc0b599d372b"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-f67ec57d630f358e"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-gotest.tools-v3-f7ad3586e7fc9745"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-f7bff905538bb765"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-fcdd43edfc6e35e3"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-gogo-protobuf-fd6195ec5db3d99d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-fe2851078a48ff02"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-AlecAivazis-survey-v2-efdf0421ca5e0be9",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-DefangLabs-secret-detector-b35b648238f5b3f2",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-0e79f88b924887e4",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-buger-goterm-30756677a19a6949",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-08cbc655bb7186a6",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-a172a17240438cd0",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-compose-spec-compose-go-v2-076565f0aa4ed8f0",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-console-a64a8cdf17043dc7",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-86b32f3c277a25ee",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-386f9941528fecba",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-continuity-4be5e2eecfea21f5",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-4beb5ca103175a64",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-03d2f837ba5a6dce",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-log-fcdd43edfc6e35e3",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-platforms-5bb77c83314eced9",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-88db0ab28f9a0e2d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-4bf33cabaa22a06b",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-distribution-reference-5ebf2931ce9a3a13",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-buildx-6982db561f6463ab",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-cli-d8d42aae67a351ae",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-98b6cb002edfdad6",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-4ffd55cf4878d949",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-31e8d22a5b5a0ca2",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-connections-780bce2215ecc796",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-units-2ef5272abe9395ca",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-eiannone-keyboard-e784276d7deb80a1",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-fe2851078a48ff02",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fvbommel-sortorder-4ced05dc580d3b04",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-b0eef5c3acd4a7e9",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-f006b55606292bd1",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-ed2e417d1dc1734e",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gofrs-flock-82d63af237487f38",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gogo-protobuf-fd6195ec5db3d99d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-f67ec57d630f358e",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-protobuf-45840c9a7044292f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-cmp-263b837a4a4658ca",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-shlex-d832cfc8b069eac8",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-f7bff905538bb765",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-8a0a0dad33f042f8",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-03324905ddd25a6f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-714bc4a5bd6dd3fe",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-cd18372c69be7d31",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-508a56b7ce3fa10a",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-in-toto-attestation-abf84024764e5467",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-in-toto-in-toto-golang-4eb5e8c396e55204",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-inhies-go-bytesize-b986f44627e25edc",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-20550357ed9e49a7",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kballard-go-shellquote-80c7c28a9f33cece",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-compress-ee83aff9492825b6",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-5f3c77ec00cbacc6",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-acf07733db9ee522",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-2a146ede9b976ae0",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-c214269aee06689d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mgutz-ansi-4a53068b0b8a00f9",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-hashstructure-v2-9ecc7b518f0ba6bf",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-buildkit-bba05f1d9519f8b2",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-bb8f345027070cb6",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-go-archive-44d02dd239d3cf1d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-locker-e3e1ca7cf95ec9d1",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-api-4ba69896e4f2d1fd",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-client-661a43ab4d18605c",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-59fdddc7b0e21398",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-83a0e2a2a5dff656",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-capability-d5ca6c58be109352",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-dc29423ea4bf317b",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-signal-c2291dcf09c8eb59",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-symlink-652241ec8de5df37",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-user-3e0eacb57af7e689",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-userns-761c3fae2de6046c",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-term-d3009d9cc4416a5c",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-morikuni-aec-6da276ebd844379e",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-a099f1f5f9dbc467",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-25937fa5b875c1a2",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-5122afa1f6915fdd",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-errors-c14f280f0ca0d5de",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-3dab304795dfe883",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-rivo-uniseg-060604cb9dc248ab",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-cd63feb540ba911e",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-4a27178ef30c3d0c",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-shibumi-go-pathspec-827a4b2e85044484",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-417ac5a9f1b08014",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-go-90c9a56ff1e26993",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-5f161bc5155b2aed",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-skratchdot-open-golang-8ec591a3d58582c1",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cobra-410f807c86ed4ca6",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-1b2dc66bf9a32c3d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tilt-dev-fsnotify-b5a091c563066f05",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-53bfc9e2638ba209",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-fsutil-16d64425fbca44aa",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-go-csvvalue-63b2f67a0f04f676",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-units-8dbd3ce20fcf5719",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-vt100-8e62aa55ee3bc77d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xhit-go-str2duration-v2-cb78e11522b27768",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-4e728e339d58f061",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-3f65e70fa2af0fe1",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-httptrace-otelhttptrace-31c7f9e6b3a5e08c",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-9d483de4559a6a68",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-5840b10df67dffde",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetricgrpc-22c26ca9f1ee2f4a",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetrichttp-7be093699c2dcb8c",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-150ee450b1ae2cca",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracegrpc-c1a121196a605676",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracehttp-86f05797307d2d19",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-c8ca4b4dbd17c16d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-38c68b58198abd8f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-3d2bfc2272742e56",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-76eb89a55611a649",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-proto-otlp-edb8e2e3e90d12ba",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.uber.org-mock-b56d7b22ca7dc6e0",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-f489bc0b599d372b",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-112e653d26186825",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-24a8a778f90fde0f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-9f85ab376bfedae1",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-33896b384206f498",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-term-e569e138a83f0a35",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-aa94b2123569a3f8",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-time-766ce897016bb12d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-06cc9b9fc7236725",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-880e649a302bdfca",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-aba81de3f0e1e71c",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-46b50a692d1dcfc8",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-ini.v1-8698590947442ece",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-e7a2518333532f15",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-gotest.tools-v3-f7ad3586e7fc9745",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-stdlib-6f467d95de240134",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-84f151a5180ae567",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-sbom-binary",
        "relationshipType": "DESCRIBES",
        "spdxElementId": "SPDXRef-DOCUMENT"
      }
    ],
    "spdxVersion": "SPDX-2.3"
  }
}