{
  "_type": "https://in-toto.io/Statement/v0.1",
  "predicateType": "https://spdx.dev/Document",
  "subject": [
    {
      "name": "docker-compose-linux-riscv64",
      "digest": {
        "sha256": "03565cf8e16b3afa6fd6555d697b3237ea2d4dbd5547ab6835bc90fa7e5e00bb"
      }
    }
  ],
  "predicate": {
    "SPDXID": "SPDXRef-DOCUMENT",
    "creationInfo": {
      "created": "2026-05-20T14:51:11Z",
      "creators": [
        "Organization: Anchore, Inc",
        "Tool: syft-v1.40.0"
      ],
      "licenseListVersion": "3.27"
    },
    "dataLicense": "CC0-1.0",
    "documentNamespace": "https://anchore.com/syft/dir/sbom-binary-91f8dfc0-508c-4c8c-9481-a3f51ec88eab",
    "files": [
      {
        "SPDXID": "SPDXRef-File-docker-compose-692def66df504244",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "03565cf8e16b3afa6fd6555d697b3237ea2d4dbd5547ab6835bc90fa7e5e00bb"
          }
        ],
        "copyrightText": "NOASSERTION",
        "fileName": "docker-compose",
        "fileTypes": [
          "APPLICATION",
          "BINARY"
        ],
        "licenseConcluded": "NOASSERTION",
        "licenseInfoInFiles": [
          "NOASSERTION"
        ]
      }
    ],
    "name": "sbom-binary",
    "packages": [
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-AlecAivazis-survey-v2-3da429059191132c",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e88feef05bf2b5d1ac8289eb62c567dadf2de108919e1e90493aa49212224a34"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:AlecAivazis:survey\\/v2:v2.3.7:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/AlecAivazis/survey/v2@v2.3.7",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/AlecAivazis/survey/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.3.7"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-DefangLabs-secret-detector-33d7f3031f18e60b",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "adde1b3af2a60c8c7459e4eff50cfe86086c8328e290588faec7971e529ea4ed"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:DefangLabs:secret-detector:v0.0.0-20250403165618-22662109213e:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:DefangLabs:secret_detector:v0.0.0-20250403165618-22662109213e:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/DefangLabs/secret-detector@v0.0.0-20250403165618-22662109213e",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/DefangLabs/secret-detector",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20250403165618-22662109213e"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-a9d27f35b4801587",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "962719245c36470a4732a78a4c26248adb0fa873714e677848d479afde0518cf"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:acarl005:stripansi:v0.0.0-20180116102854-5a71ef0e047d:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/acarl005/stripansi@v0.0.0-20180116102854-5a71ef0e047d",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/acarl005/stripansi",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20180116102854-5a71ef0e047d"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-buger-goterm-77abb4cd656f73b7",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "67d62f1a63a287cd4fd056d5b44613145e98b1283149428485ffdff5b4cc5db6"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:buger:goterm:v1.0.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/buger/goterm@v1.0.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/buger/goterm",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-52def390eaa09ca0",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "64df8831aef9dca7d7e6177cbd568c8b18e7a91677cbc0ae24a44a8f5c5cb123"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:cenkalti:backoff\\/v5:v5.0.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/cenkalti/backoff/v5",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v5.0.3"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-edcec86d09998eaf",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "50bf35e7153d4aab059626f3ba08338d786883b6cbea85fd05b3599cbd9416fb"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/cespare/xxhash/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.3.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-compose-spec-compose-go-v2-ca242084bae65772",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c68abfa28b6020be93b0799b247ae4ba1efe6f38e13d5dcd1dfb4744f3f25573"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose-spec:compose-go\\/v2:v2.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose-spec:compose_go\\/v2:v2.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose_spec:compose-go\\/v2:v2.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose_spec:compose_go\\/v2:v2.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose:compose-go\\/v2:v2.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose:compose_go\\/v2:v2.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/compose-spec/compose-go/v2@v2.11.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/compose-spec/compose-go/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.11.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-console-c183c9ff64f16b69",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "474ca635ec9d46a1f60e66a414d7668d1da4d2ded43ee88e57f37fdbbfeaaac7"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:console:v1.0.5:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/console@v1.0.5",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/console",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.5"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-6437dc475d82e5c7",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e67d281d8541c0de158685fd7c5ca4095f5d175fc1bc05de83617c5ba518ab5a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:containerd\\/api:v1.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/containerd/api@v1.10.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/containerd/api",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.10.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-e4a8d5fc081dab49",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "98e0512da1c6be6832d1b468d5283a383f2e80c29922f0a859631e30cca09620"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:containerd\\/v2:v2.2.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/containerd/v2@v2.2.3",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/containerd/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.2.3"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-continuity-8456c37e3c18fb5d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "651a0dd6c5eaf6eed5e90a0731c5561a13b00c5a99e01f62e47eae9f55a1d31e"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:continuity:v0.4.5:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/continuity@v0.4.5",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/continuity",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.4.5"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-f54670566baa795e",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "b60e7221f225408af162dbbd6a3a98e365b79694b5f57a9dc5141e130606f0f2"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v1.0.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/errdefs",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-3b824a1ff8a4f4f7",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "f48289d3a16fc8d95ec56ebdd035ee40dc76280d9c5095f1d79d57771dd93cf1"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:errdefs\\/pkg:v0.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/errdefs/pkg",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.3.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-log-be303fd48a08884f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "4c226dee2a0cd9caffb5f47c18f6c67fdfd54405fc0f60783e3cc2a5f5f9e342"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:log:v0.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/log@v0.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/log",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-platforms-cff1aff0b2e32ca0",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "338d89ad44f8cdf653aad914c24af41b399459b7f23b954ed10e5bde8a7ded3e"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:platforms:v1.0.0-rc.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/platforms",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.0-rc.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-bdff8e6861f4570d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c5b56ee83e2a1768e285d87dac354e2aa50c88505093a61cb53768d73934f3b6"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:ttrpc:v1.2.8:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/ttrpc@v1.2.8",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/ttrpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.2.8"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-af07d1a20d09540d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c8d03ff78cf159dbd80027583bcce87e1ad356e418ef77c5535cbef9d612c38d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:typeurl\\/v2:v2.2.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/typeurl/v2@v2.2.3",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/typeurl/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.2.3"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-distribution-reference-8c0c0f65050a5268",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "d085c2439838fd03071e46ab63387997ebbc4f7b7bdf333942f7eb0f2220c419"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:distribution:reference:v0.6.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/distribution/reference@v0.6.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/distribution/reference",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.6.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-buildx-b1f3e3fbc3e3a72b",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c6e65eb907bf0bfdadbcb0e088803af989eadc515649fb06356207337ab5843f"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:buildx:v0.33.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/buildx@v0.33.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/buildx",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.33.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-cli-67bb2e79171c37ba",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "362b9f2c026845c3dab85a01358b617ee33844417033c1f687dc672c004d1c6b"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:cli:v29.5.1\\+incompatible:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/cli@v29.5.1%2Bincompatible",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/cli",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v29.5.1+incompatible"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:compose\\/v5:v5.1.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/compose/v5@v5.1.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/compose/v5",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v5.1.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-103c38d8f059fb8b",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0c15f4634cc08d96d2ae6d6ecce91daf5a2756084a69fb639525ade0015ec733"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:docker:v28.5.2\\+incompatible:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/docker@v28.5.2%2Bincompatible",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/docker",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v28.5.2+incompatible"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-2d1b40976cd7cd17",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "10534df031ef6a22bccd5a850360d3e818d71341b37cb399dfc8203d329e3e46"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.5:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.5:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/docker-credential-helpers",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.9.5"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-connections-83eb7516335d2c91",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e92b117c975d3f6d9632b0a48f5f71f562a31034c1f9a86c7621987f498ddfd7"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:go-connections:v0.7.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:go_connections:v0.7.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/go-connections@v0.7.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/go-connections",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.7.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-units-d5f8e695e9f40fdc",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "ebdaf15dc064dbb4af49a6b14ed2e1ffc9657070fcbd81d3ed649d459fe3bebe"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/go-units@v0.5.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/go-units",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.5.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-eiannone-keyboard-d35ad953985650ef",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "5c10477086f6e7a81426d2e6636da7f7d1da653cfeaf6679d7150f8b4d66df08"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:eiannone:keyboard:v0.0.0-20220611211555-0d226195f203:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/eiannone/keyboard@v0.0.0-20220611211555-0d226195f203",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/eiannone/keyboard",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20220611211555-0d226195f203"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-3bb70101280d2a9f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3454d5d998f56cbe2673db2a5800976d01550418365b718fbeaa7cfc4492d968"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.0.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/felixge/httpsnoop",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-fvbommel-sortorder-b679bab624c2154c",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "7d49a87be1cbb014dcb410e8681c29428e4dfa7ac2a7c83f06329bffa650998c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:fvbommel:sortorder:v1.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/fvbommel/sortorder@v1.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/fvbommel/sortorder",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-374f772f2c419ea6",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0a39c3947abc8a47fa138f76aba78a6e818e0b44fc08368ebe41c2220f227442"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go:logr:v1.4.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.3",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/go-logr/logr",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.4.3"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-9daaf2cdcd03dcf8",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8525b11e8a93816d92daa19cd0b4c0239eb7299e582984614f730529931b8da8"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/go-logr/stdr",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.2.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-6c78021e692745c2",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "bcce48268500cb777bcd1495b48c108018fb0625ad30f7e63c48005e7be3d51a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/go-viper/mapstructure/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.5.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-gofrs-flock-41ec91f21f4d1752",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "f792689583af18ca9e1f7d7e142ec3dbeb942dfea61bad66119fc0f1d458333c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:gofrs:flock:v0.13.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/gofrs/flock@v0.13.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/gofrs/flock",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.13.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-gogo-protobuf-d0ec500fb5f4426a",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3afd5cbdce7c505ddbe578c19d9bfbfa8a5c4dc40565e6d88d6ce2df8bdd9b84"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:gogo:protobuf:v1.3.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/gogo/protobuf@v1.3.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/gogo/protobuf",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.3.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-cead070fa230aa06",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "a6fe00b0a08a299baa960b39b149a7e31f149466b490456dfe9b93a4ac7dbefa"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang-jwt:jwt\\/v5:v5.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang_jwt:jwt\\/v5:v5.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:jwt\\/v5:v5.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/golang-jwt/jwt/v5",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v5.3.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-golang-protobuf-cfe1d3573f2ae816",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8bb7892fca994e94845ce3d3c4d2a1012629327fbc7b943a01d9dd55ad5d59e9"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:protobuf:v1.5.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/golang/protobuf@v1.5.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/golang/protobuf",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.5.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-cmp-feccf442a74d3dc3",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c24f37f36113b2fe0961467022c9fa6296225a206c60b489893b320726d5b8df"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/google/go-cmp@v0.7.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/google/go-cmp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.7.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-google-shlex-1f2cce834427de68",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "125e8ce244d308e87a68188a694186ee861348f3fc331a8be182379192b070fe"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:shlex:v0.0.0-20191202100458-e7afc7fbc510:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/google/shlex@v0.0.0-20191202100458-e7afc7fbc510",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/google/shlex",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20191202100458-e7afc7fbc510"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-29bebb5a9a7caeff",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "348bda24330eb231c0f27d630212d2833ac0cf2d4782bfa136b6f9edefbde05d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/google/uuid",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.6.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-e7b55b31bc615d10",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1d6461e51dbef4489f33220757b655f8c219aa0cfe3cca59d782729efdced99b"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc-ecosystem:grpc-gateway\\/v2:v2.28.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc-ecosystem:grpc_gateway\\/v2:v2.28.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc_ecosystem:grpc-gateway\\/v2:v2.28.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc_ecosystem:grpc_gateway\\/v2:v2.28.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc:grpc-gateway\\/v2:v2.28.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc:grpc_gateway\\/v2:v2.28.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.28.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.28.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-e05b802d4c739350",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3b1ace7a1ef91145cc63c4c18da8367f35c6678d0b07a20ac38e587865036362"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/hashicorp/errwrap",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-ffe195c99ba942be",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "d37e452982168e650bc8544128fb3c4c14288b4c7a77d1b8c5cf677972560194"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/hashicorp/go-cleanhttp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.5.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-924487eea58b2ab8",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1f90e412d7fa097745a74374126e540b04295cc5a47bc200d3e943e3c6b0318a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/hashicorp/go-multierror",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-d42b3fed7243d79e",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "09e388cfa93e2e8377a97f59d2dc90acfb620750c56113df08806d6973d20a70"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go-version:v1.9.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go_version:v1.9.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/hashicorp/go-version@v1.9.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/hashicorp/go-version",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.9.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-in-toto-attestation-512998fe5d8d6e06",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "301167ea5b0caba769b506490616a55d371631bfda272dd5f865f75588ff5751"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in-toto:attestation:v1.1.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in_toto:attestation:v1.1.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in:attestation:v1.1.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/in-toto/attestation@v1.1.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/in-toto/attestation",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-in-toto-in-toto-golang-268463556d8d7404",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "facd9e65048add69967d857ce6a5d54817ea81ac22ff92f4d8c6aa038a3fb693"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in-toto:in-toto-golang:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in-toto:in_toto_golang:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in_toto:in-toto-golang:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in_toto:in_toto_golang:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in:in-toto-golang:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in:in_toto_golang:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/in-toto/in-toto-golang@v0.10.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/in-toto/in-toto-golang",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.10.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-inhies-go-bytesize-c0a5e5ca1316b1ac",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "16d123f2c7c871a6817c02ab1350b06fad580ed62af49c4284ad5cec029c7bbb"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:inhies:go-bytesize:v0.0.0-20220417184213-4913239db9cf:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:inhies:go_bytesize:v0.0.0-20220417184213-4913239db9cf:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/inhies/go-bytesize@v0.0.0-20220417184213-4913239db9cf",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/inhies/go-bytesize",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20220417184213-4913239db9cf"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-5fcfb61b0498144b",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1f287d03cbb9d64a6d76447e72a4694f511e6c1c139f5a0af587c661b745cfa2"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:jonboulle:clockwork:v0.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/jonboulle/clockwork@v0.5.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/jonboulle/clockwork",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.5.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-kballard-go-shellquote-1726b9dbc74762e6",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "67d9f61453545ecb217f024c060340d1153afe2ed655a01e82fdcfb6e2073ccb"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:kballard:go-shellquote:v0.0.0-20180428030007-95032a82bc51:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:kballard:go_shellquote:v0.0.0-20180428030007-95032a82bc51:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/kballard/go-shellquote@v0.0.0-20180428030007-95032a82bc51",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/kballard/go-shellquote",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20180428030007-95032a82bc51"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-compress-badeb3cd397d4f8c",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "fe1d601f909ef9558d2d25aa3f33959fa5c13bebc96c2346be3a1a181156d881"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:klauspost:compress:v1.18.5:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/klauspost/compress@v1.18.5",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/klauspost/compress",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.18.5"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-9f19b8b019badb76",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "f40f4b1d2a85ffb7725555fa83453d7309bda46de43fd812cdcb883c73ec6881"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go-colorable:v0.1.14:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go_colorable:v0.1.14:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mattn/go-colorable@v0.1.14",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mattn/go-colorable",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.1.14"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-3c29dab2881b7019",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c5f0f4883b842a70e4974deae258a607ebc7f86c4b12d2ff8dbe315494965846"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go-isatty:v0.0.20:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go_isatty:v0.0.20:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mattn/go-isatty@v0.0.20",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mattn/go-isatty",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.20"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-044e905cd29d7851",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "13949c34cb62c2f96f079a5a305770f69e24490cdb5c58a42794903ba4d42d07"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go-runewidth:v0.0.16:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go_runewidth:v0.0.16:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mattn/go-runewidth@v0.0.16",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mattn/go-runewidth",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.16"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-7459a19fa5dd27fc",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0c2d0e304a468e6e8b7cd154e1c91872f6d02b2a76bc4f1ab721465cdb4371fe"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go-shellwords:v1.0.13:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go_shellwords:v1.0.13:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mattn/go-shellwords@v1.0.13",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mattn/go-shellwords",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.13"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mgutz-ansi-f600dd1392cdb704",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8fbfb51e90054b5cf2e7e438ab1d5f5a1f748132b088de10086a18f535b2c8ee"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mgutz:ansi:v0.0.0-20170206155736-9520e82c474b:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20170206155736-9520e82c474b",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mgutz/ansi",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20170206155736-9520e82c474b"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-hashstructure-v2-67172bf9be6f7ff8",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "bc6296974609a9437113c77e87c7fa3492dc089ae06e10b835c0f8e8a6af0dde"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mitchellh:hashstructure\\/v2:v2.0.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mitchellh/hashstructure/v2@v2.0.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mitchellh/hashstructure/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.0.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-buildkit-ea7700de87b911cc",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c312c415b08e267b440e348d34dd9859df33c65b59c53e66b834342f3a5bb695"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:buildkit:v0.29.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/buildkit@v0.29.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/buildkit",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.29.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-b4bc728ada32e44f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8cc29f7f7c3a3e06df49aebd19f360fb337f5cb85f5c91a7131dcd97612c14fd"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:docker-image-spec:v1.3.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:docker_image_spec:v1.3.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/docker-image-spec",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.3.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-go-archive-c611e2963eed5cea",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "ce0e500d43369a2d0920cf5f7506560bb53cfb665f8b17d36281cbeeb59470ff"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:go-archive:v0.2.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:go_archive:v0.2.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/go-archive@v0.2.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/go-archive",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.2.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-locker-65fb6c558e260cd8",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "7ce5ea478d737af7a0e1f14e0e2c7ed428789a3fe04f4344d5725ba7f7a9b818"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:locker:v1.0.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/locker@v1.0.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/locker",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-api-90871181fef8f5bf",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c226adf500219c342303bc24d6487f4ea1f3d88d6e500ecceedf52025fc93578"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:moby\\/api:v1.54.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/moby/api@v1.54.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/moby/api",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.54.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-client-cea8412818117e86",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0cc4208ac56832498cb3b7e9dd1392762067a00bbcfafa371a0805974e8cff06"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:moby\\/client:v0.4.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/moby/client@v0.4.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/moby/client",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.4.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-9e375e55b8387fdc",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "aa586d69f9abea480c2098ca24c0e6316abb58b90a228db786cae9477c74f385"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:patternmatcher:v0.6.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/patternmatcher@v0.6.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/patternmatcher",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.6.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-f1624cc1b0728cc4",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "930e43fc4aa4070b01162d2cb3dbf5546df0224561cc6bcb92527ec37035e12c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/atomicwriter:v0.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/atomicwriter@v0.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/atomicwriter",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-capability-b1bbdd7795eca14f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e03e2623a2a536d58c08cd59fcad22ed15751645fe0c10c72952690a7759a079"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/capability:v0.4.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/capability@v0.4.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/capability",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.4.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-683bef66343f9ea4",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "aabc7b5c551dff90f1b6a7281f5878dfc845e5398ebf30bf96ca63cbbce0bc25"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/sequential:v0.6.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/sequential@v0.6.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/sequential",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.6.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-signal-e43aab8d72646da4",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3eb43176fc5c1a28dda3a5175e8fe553f4ef1d45b23e18fb50ea52a3cb6ebe4d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/signal:v0.7.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/signal@v0.7.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/signal",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.7.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-symlink-f13fe148322e3922",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1995fcf66119f6ee777fdee7a41cb845cdef24a8fb2410e3fcf376236d86acd5"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/symlink:v0.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/symlink@v0.3.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/symlink",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.3.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-user-93bcb0c043d3acfe",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8e170c2a2b7b480f34862be614971b075bea9b0fffc14eb565dba2d9e417b8cb"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/user:v0.4.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/user@v0.4.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/user",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.4.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-userns-7cf56c8831258f19",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "b552d79053b156ef40eb8ff2879f6c94756ff5a84ef5421ebf8259bac38b1bf8"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/userns:v0.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/userns@v0.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/userns",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-term-29c02a7dfadc643e",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "eaa9371490050ecea2feadd6fe943ded25f5f76a8a7d98068c242a7c22648334"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:term:v0.5.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/term@v0.5.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/term",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.5.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-morikuni-aec-6bb01b92b9496421",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "bc1065d29527be2fc97bbd5db11ae1301b6b788a8d31812b4806c479bf23ad74"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:morikuni:aec:v1.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/morikuni/aec@v1.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/morikuni/aec",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-74d0550e7a332a23",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "6a93945ace755b93e586ec86cb3f4509e78120e50303fea75bc3a2ff23a18795"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/opencontainers/go-digest",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-501eaf1aff73d9ce",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "cb47d49457c86613c5d56e77ed738b834fdf731eb3707089c28a02db1240d38d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/opencontainers/image-spec",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-59519fd8db2f78e5",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "9b27bd5ee850ea0be7e61dbcf958a52abacfa1055a9f0e4f330fd3074b7911ce"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:pelletier:go-toml\\/v2:v2.2.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:pelletier:go_toml\\/v2:v2.2.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/pelletier/go-toml/v2@v2.2.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/pelletier/go-toml/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.2.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-errors-8c4e841eb246af70",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "14404bc75cd2db5e28c298f2eeab017a2c5b51192e850030acae54c0b193c2de"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/pkg/errors",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.9.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-201ce3f124e06c98",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "18508a826a74b5e714274b09bafe29cd80aa4bdf911929f9d8cdc55303ecfaea"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:planetscale:vtprotobuf:v0.6.1-0.20240319094008-0393e58bdf10:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/planetscale/vtprotobuf",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.6.1-0.20240319094008-0393e58bdf10"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-rivo-uniseg-0cf57d953cdb0946",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "59476f916f2e121ad87cb0b8673769236cedc4fd48e7cdbee3d39ce4cabae154"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:rivo:uniseg:v0.4.7:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/rivo/uniseg@v0.4.7",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/rivo/uniseg",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.4.7"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-a68051f4446f0e9f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3ca2bd0f21f189fe0b668fae41281736ab348e3e7ec59c307ca1e0a61da5c41c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:santhosh-tekuri:jsonschema\\/v6:v6.0.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:santhosh_tekuri:jsonschema\\/v6:v6.0.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:santhosh:jsonschema\\/v6:v6.0.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/santhosh-tekuri/jsonschema/v6",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v6.0.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-98c202cbcc653a64",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "97e1f912b716d0f01e84136b071a06bf58e3369198759f51721785901d96235e"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure:go-securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure:go_securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.10.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/secure-systems-lab/go-securesystemslib",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.10.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-shibumi-go-pathspec-a4ab888c203adb1c",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "414c8c661168d0c77907ccd5f31dad7aca216dbe647dba538bdac19ca8797642"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:shibumi:go-pathspec:v1.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:shibumi:go_pathspec:v1.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/shibumi/go-pathspec",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.3.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-bcdf2f34a3542920",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "cad3a6c4c80b75c51e777c3549b6d93a0731ab0306eb5961d539992cdf967991"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:sigstore:sigstore:v1.10.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/sigstore/sigstore@v1.10.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/sigstore/sigstore",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.10.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-go-d3dd8d05f5b55fcb",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c134ec8021ce7ea884cd5c81600ea60dccc6b4190dedc33c98fa63263e50bcc8"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:sigstore:sigstore-go:v1.1.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:sigstore:sigstore_go:v1.1.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/sigstore/sigstore-go@v1.1.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/sigstore/sigstore-go",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-020e75b5e44f7777",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "4ec644ee5d75cc508b66767eb5e1f8526a2ae4184421f2337d10d9d54cea976c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:sirupsen:logrus:v1.9.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/sirupsen/logrus@v1.9.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/sirupsen/logrus",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.9.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-skratchdot-open-golang-4a0900cb9c1d76f8",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "24802eab71047fd7206d4e80b463cae024c6dd97fa08a30da9fd0c1d38200140"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:skratchdot:open-golang:v0.0.0-20200116055534-eef842397966:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:skratchdot:open_golang:v0.0.0-20200116055534-eef842397966:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/skratchdot/open-golang@v0.0.0-20200116055534-eef842397966",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/skratchdot/open-golang",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20200116055534-eef842397966"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cobra-42d1fdafcef7eaf5",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0cc4d3a27c799bae4873418ea11636735e9609b1f138ec3ac717b3b8b681a5c5"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/spf13/cobra",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.10.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-4982baf6412842c3",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e04061d8a01807068e363e9bd987b51a21dfc23ab244ea05e11c183bebcfc059"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/spf13/pflag",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.10"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tilt-dev-fsnotify-bed7d4a3d027149f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "401e78049c00eb1f1053d9c7637c49499476917f5b82965e91128690b4e61170"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tilt-dev:fsnotify:v1.4.8-0.20220602155310-fff9c274a375:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tilt_dev:fsnotify:v1.4.8-0.20220602155310-fff9c274a375:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tilt:fsnotify:v1.4.8-0.20220602155310-fff9c274a375:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tilt-dev/fsnotify@v1.4.8-0.20220602155310-fff9c274a375",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tilt-dev/fsnotify",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.4.8-0.20220602155310-fff9c274a375"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-c342c82df7f3edc4",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "af4a7b7cae7a97c58f7aab8e691de2f4b06a7cfb447572106d44f34f9e62a93e"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:dchapes-mode:v0.0.0-20250318174251-73d941a28323:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:dchapes_mode:v0.0.0-20250318174251-73d941a28323:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tonistiigi/dchapes-mode@v0.0.0-20250318174251-73d941a28323",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tonistiigi/dchapes-mode",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20250318174251-73d941a28323"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-fsutil-34f78336f0393aba",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "67834443ceaa165d661ee0aef60c1c13e1180b00ca7d70185d96dd217cb19840"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:fsutil:v0.0.0-20251211185533-a2aa163d723f:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tonistiigi/fsutil@v0.0.0-20251211185533-a2aa163d723f",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tonistiigi/fsutil",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20251211185533-a2aa163d723f"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-go-csvvalue-4508cd8d43ac1f95",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "d9fdf4e01d742da65d07c9245446a85ef00c55a9f6b65f4088ae06d2876342d1"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:go-csvvalue:v0.0.0-20240814133006-030d3b2625d0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:go_csvvalue:v0.0.0-20240814133006-030d3b2625d0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tonistiigi/go-csvvalue@v0.0.0-20240814133006-030d3b2625d0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tonistiigi/go-csvvalue",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20240814133006-030d3b2625d0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-units-12b6e9a488d4b118",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "4978532c4ea96fa7a577fbff7029dd2b400ca6dd7089515bfd8626a81dff406d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:units:v0.0.0-20180711220420-6950e57a87ea:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tonistiigi/units@v0.0.0-20180711220420-6950e57a87ea",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tonistiigi/units",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20180711220420-6950e57a87ea"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-vt100-797a5552b9ddc867",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1fa689d32290d20178f506f6cf9848d541f1490b7824ccb179b151d792a7029c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:vt100:v0.0.0-20240514184818-90bafcd6abab:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tonistiigi/vt100@v0.0.0-20240514184818-90bafcd6abab",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tonistiigi/vt100",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20240514184818-90bafcd6abab"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-xhit-go-str2duration-v2-b7fbd95e47047f77",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "971925734d83ae1eb29ea5fe0dd3f2a79a4228b510a514fc6e9f1876ed81b2d7"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:xhit:go-str2duration\\/v2:v2.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:xhit:go_str2duration\\/v2:v2.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/xhit/go-str2duration/v2@v2.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/xhit/go-str2duration/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-03a28bbe6b8b37b7",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8d7b272782e69ea775d64c24055d8b80ba053192a2cdb0a2e5f359fe2a5a67ae"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/auto/sdk",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.2.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-4f54d7e7f40138da",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "607e20f2542ba1a8ea53059babfb6bd905f52459845da0cb806f9ec3d6cb316a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/google.golang.org\\/grpc\\/otelgrpc:v0.63.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.63.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.63.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-httptrace-otelhttptrace-bb242e198b9633b8",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "da99fb3b331ec2661188db6fd5da199cba3780e35c9cc1e516798e47c560b7ef"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/httptrace\\/otelhttptrace:v0.63.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.63.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.63.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-4ad589c058d460ec",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "45b2aaf011b4148f0e8978417dc46daaa1dc65c91afa053772c90db9fd39475f"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.63.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.63.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.63.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-f1c97239aac0af23",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "99820cd37767879cdf37b1dabad144e227888a0f5a9a4340353fb1715c408fd2"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.43.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetricgrpc-ac032067a5dea847",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "31d2ae70f97f1dbcdc9165848ac88da8c3e146b00e417f2be234ee1abeb7ea09"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:exporters\\/otlp\\/otlpmetric\\/otlpmetricgrpc:v1.42.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc@v1.42.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.42.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetrichttp-e717bcee3591076d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1fb3ba46518e3138b3ca5dd1d3c2a7e6974cd3a6e71fca2c7128fba35d6d98b0"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:exporters\\/otlp\\/otlpmetric\\/otlpmetrichttp:v1.42.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.42.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.42.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-72e395083008cb6c",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "4c7b998b0a5066e1cfba5eb9c3859cc049e45f6408b8c4fe505a0eaf282da09c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:exporters\\/otlp\\/otlptrace:v1.42.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.42.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.42.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracegrpc-cf44f7206d714a75",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "cd65ab07553a9ea852fe4eb3601ef80a3469ba28ad46d2cb8baf1572098e12da"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:exporters\\/otlp\\/otlptrace\\/otlptracegrpc:v1.42.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.42.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.42.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracehttp-d340e3db3c50ff50",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "b8b5cffb79a085f31fed7995e0f9067c58452ae356a02befc79c0fff0397a34a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:exporters\\/otlp\\/otlptrace\\/otlptracehttp:v1.42.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.42.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.42.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-086ef37d2e5e9bb4",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "77beb7f107889ce9eec0e38d3e9e0900e19f6c212961bf8ae83556bddc46ce03"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:metric:v1.43.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.43.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/metric",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.43.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-02a4f3637f5d7815",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "a62e6613cea2e6b4de2d7aa817f861881b5435cac01872ca41d860e21e15f438"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:sdk:v1.43.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/sdk",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.43.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-bdf219fd640dbdcc",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "4bcf1dcaa5e3264b8134b78c7153d1157a51c367eec1dbdf0862c4a3cf5f0e4c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:sdk\\/metric:v1.43.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.43.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/sdk/metric",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.43.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-d3a287b2e7deefae",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "06436b1e9ba9fb8938c3e659f3a099a071c4928870b3c018f964d7d3d9e4fb70"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:trace:v1.43.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/trace",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.43.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-proto-otlp-9e7992c0dc69850b",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "97bd3a8c23084d5a2e3cea849e28b67c802e3b721518144f5792028dc7916ff0"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:proto:otlp:v1.9.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.9.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/proto/otlp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.9.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.uber.org-mock-b7ccb0ea60b532fd",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "87217d75f99b8085f911f39d6aca8bb160fac6aa4d6655db94b07f0db9f0bf76"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.uber.org/mock@v0.6.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.uber.org/mock",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.6.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-d96feb939fdf6e2b",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "50fe3ebfa7c5ac121bd65f77e1b0e5fff9a69e82191032b489d835f8022f5f95"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:yaml:v4:v4.0.0-rc.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.yaml.in/yaml/v4@v4.0.0-rc.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.yaml.in/yaml/v4",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v4.0.0-rc.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-55726825a3b1cf44",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "fd547356a8914a0827858ee0351c4f6ae110e43af0f6168a74cd23a9f70216db"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go:ssh:v0.48.0:*:*:*:*:go:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.48.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/crypto",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.48.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-27affcaf156c2108",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "f7847f1933bb9addffe3020aa5c4798241a644b3ae13fda1346796abf181205a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:networking:v0.51.0:*:*:*:*:go:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/net@v0.51.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/net",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.51.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-de2af1ee700f3050",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "7b43d3a5bee98cef0602d4ecd9d43a8d86b905662532e5f4e3b0dca3fa48b4ee"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.20.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/sync@v0.20.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/sync",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.20.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-6db3d6d5be242180",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8a5759977278bb378a3f4eebd85fbe3a9ec4f41dbd251532f9adbb1226ed0534"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.44.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/sys@v0.44.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/sys",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.44.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-term-b40698868666b597",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "40280fb28fd0dd14c9c764e1e1b0cba8c2f85ba88989a5c5ab6fdfb50175dd85"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:x\\/term:v0.41.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/term@v0.41.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/term",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.41.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-b771c289e14969c3",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "a0bfd0ab429d6aac5ad4a6cd78c2b042ad2b78b082685b6abb678db9278d1db9"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:text:v0.34.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/text@v0.34.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/text",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.34.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-time-058992faf7c49535",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "311c7851a2eb0e8b5429474222accf0b8f2dd58f6100d14a211a4dc7e4def0f2"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:x\\/time:v0.14.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/time@v0.14.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/time",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.14.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-507776413a4d4ef8",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "b6efddb675b5a37c1f6b108e8d22e7e48457e180dc26bb65a73624847846682e"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260226221140-a57be14db171:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260226221140-a57be14db171",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "google.golang.org/genproto/googleapis/api",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20260226221140-a57be14db171"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-28b574b125de7bd9",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "82071b8aa2bc59687a97576796d538060586206a3e11563109a00f8a1ff34174"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260226221140-a57be14db171:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260226221140-a57be14db171",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "google.golang.org/genproto/googleapis/rpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20260226221140-a57be14db171"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-41af9f36b42bdd68",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "5679c8219f3c53338e28bba4422f88986cfc3b559da7c9c01869ef39f1085904"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:grpc:v1.81.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.81.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "google.golang.org/grpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.81.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-99456aba66c25b32",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "7d5e99c21368703c812cad1d8fe7e0f1e92d7157a0041b84a25a5b4d0c813551"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.11:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.11",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "google.golang.org/protobuf",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.36.11"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-gopkg.in-ini.v1-79879798ca7b6598",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0e09f1fbafa77c4f887f38d410848d7b274f261f405cd36c59b18ff4acc2b0e0"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/gopkg.in/ini.v1@v1.67.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "gopkg.in/ini.v1",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.67.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-04632e27eac6a616",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "7f1566fc6cc0cc45aa2c7baf72d23dd4a4bd8613669963a85aed174d8252ec20"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "gopkg.in/yaml.v3",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v3.0.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-gotest.tools-v3-1ead701c6fb6f5ab",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "ee4a107c829dcbe23c5137adc9c814a975920f0a60bf5f7729afaa46c98163c4"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/gotest.tools/v3@v3.5.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "gotest.tools/v3",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v3.5.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-stdlib-46f032dd0b3815ed",
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:go:1.26.3:-:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/stdlib@1.26.3",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "BSD-3-Clause",
        "name": "stdlib",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "go1.26.3"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-6baf11e9f0fbcb01",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "467c4d87117524ebba089515a5eb5362fad71ddc70f63f63158819a48f9a9d26"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/tags.cncf.io/container-device-interface@v1.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "tags.cncf.io/container-device-interface",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.0"
      },
      {
        "SPDXID": "SPDXRef-DocumentRoot-Directory-sbom-binary",
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "sbom-binary",
        "primaryPackagePurpose": "FILE",
        "supplier": "NOASSERTION"
      }
    ],
    "relationships": [
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-020e75b5e44f7777"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-02a4f3637f5d7815"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-03a28bbe6b8b37b7"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-044e905cd29d7851"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-04632e27eac6a616"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-058992faf7c49535"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-086ef37d2e5e9bb4"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-rivo-uniseg-0cf57d953cdb0946"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-103c38d8f059fb8b"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-units-12b6e9a488d4b118"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-kballard-go-shellquote-1726b9dbc74762e6"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-gotest.tools-v3-1ead701c6fb6f5ab"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-shlex-1f2cce834427de68"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-201ce3f124e06c98"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-in-toto-golang-268463556d8d7404"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-27affcaf156c2108"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-28b574b125de7bd9"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-29bebb5a9a7caeff"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-term-29c02a7dfadc643e"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-2d1b40976cd7cd17"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-DefangLabs-secret-detector-33d7f3031f18e60b"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-fsutil-34f78336f0393aba"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-374f772f2c419ea6"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-3b824a1ff8a4f4f7"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-3bb70101280d2a9f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-3c29dab2881b7019"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-AlecAivazis-survey-v2-3da429059191132c"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-41af9f36b42bdd68"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-gofrs-flock-41ec91f21f4d1752"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-42d1fdafcef7eaf5"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-go-csvvalue-4508cd8d43ac1f95"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-stdlib-46f032dd0b3815ed"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-4982baf6412842c3"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-skratchdot-open-golang-4a0900cb9c1d76f8"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-4ad589c058d460ec"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-4f54d7e7f40138da"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-501eaf1aff73d9ce"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-507776413a4d4ef8"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-attestation-512998fe5d8d6e06"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-52def390eaa09ca0"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-55726825a3b1cf44"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-59519fd8db2f78e5"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-5fcfb61b0498144b"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-6437dc475d82e5c7"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-locker-65fb6c558e260cd8"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-hashstructure-v2-67172bf9be6f7ff8"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-67bb2e79171c37ba"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-683bef66343f9ea4"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-6baf11e9f0fbcb01"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-morikuni-aec-6bb01b92b9496421"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-6c78021e692745c2"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-6db3d6d5be242180"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-72e395083008cb6c"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-7459a19fa5dd27fc"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-74d0550e7a332a23"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-buger-goterm-77abb4cd656f73b7"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-vt100-797a5552b9ddc867"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-gopkg.in-ini.v1-79879798ca7b6598"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-7cf56c8831258f19"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-83eb7516335d2c91"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-continuity-8456c37e3c18fb5d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-8c0c0f65050a5268"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-8c4e841eb246af70"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-90871181fef8f5bf"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-924487eea58b2ab8"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-93bcb0c043d3acfe"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-98c202cbcc653a64"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-99456aba66c25b32"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-9daaf2cdcd03dcf8"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-9e375e55b8387fdc"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-proto-otlp-9e7992c0dc69850b"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-9f19b8b019badb76"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-shibumi-go-pathspec-a4ab888c203adb1c"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-a68051f4446f0e9f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-a9d27f35b4801587"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetricgrpc-ac032067a5dea847"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-af07d1a20d09540d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-capability-b1bbdd7795eca14f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-buildx-b1f3e3fbc3e3a72b"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-b40698868666b597"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-b4bc728ada32e44f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-fvbommel-sortorder-b679bab624c2154c"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-b771c289e14969c3"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.uber.org-mock-b7ccb0ea60b532fd"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-xhit-go-str2duration-v2-b7fbd95e47047f77"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-badeb3cd397d4f8c"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-httptrace-otelhttptrace-bb242e198b9633b8"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-bcdf2f34a3542920"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-bdf219fd640dbdcc"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-bdff8e6861f4570d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-be303fd48a08884f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tilt-dev-fsnotify-bed7d4a3d027149f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-inhies-go-bytesize-c0a5e5ca1316b1ac"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-console-c183c9ff64f16b69"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-c342c82df7f3edc4"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-go-archive-c611e2963eed5cea"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-compose-spec-compose-go-v2-ca242084bae65772"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-cea8412818117e86"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-cead070fa230aa06"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracegrpc-cf44f7206d714a75"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-golang-protobuf-cfe1d3573f2ae816"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-cff1aff0b2e32ca0"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-gogo-protobuf-d0ec500fb5f4426a"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracehttp-d340e3db3c50ff50"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-eiannone-keyboard-d35ad953985650ef"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-d3a287b2e7deefae"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-go-d3dd8d05f5b55fcb"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-d42b3fed7243d79e"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-d5f8e695e9f40fdc"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-d96feb939fdf6e2b"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-de2af1ee700f3050"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-e05b802d4c739350"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-signal-e43aab8d72646da4"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-e4a8d5fc081dab49"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetrichttp-e717bcee3591076d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-e7b55b31bc615d10"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-buildkit-ea7700de87b911cc"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-edcec86d09998eaf"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-symlink-f13fe148322e3922"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-f1624cc1b0728cc4"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-f1c97239aac0af23"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-f54670566baa795e"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mgutz-ansi-f600dd1392cdb704"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-feccf442a74d3dc3"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-ffe195c99ba942be"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-020e75b5e44f7777"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-02a4f3637f5d7815"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-03a28bbe6b8b37b7"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-044e905cd29d7851"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-04632e27eac6a616"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-058992faf7c49535"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-086ef37d2e5e9bb4"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-rivo-uniseg-0cf57d953cdb0946"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-103c38d8f059fb8b"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-units-12b6e9a488d4b118"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-kballard-go-shellquote-1726b9dbc74762e6"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-gotest.tools-v3-1ead701c6fb6f5ab"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-shlex-1f2cce834427de68"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-201ce3f124e06c98"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-in-toto-golang-268463556d8d7404"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-27affcaf156c2108"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-28b574b125de7bd9"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-29bebb5a9a7caeff"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-term-29c02a7dfadc643e"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-2d1b40976cd7cd17"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-DefangLabs-secret-detector-33d7f3031f18e60b"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-fsutil-34f78336f0393aba"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-374f772f2c419ea6"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-3b824a1ff8a4f4f7"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-3bb70101280d2a9f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-3c29dab2881b7019"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-AlecAivazis-survey-v2-3da429059191132c"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-41af9f36b42bdd68"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-gofrs-flock-41ec91f21f4d1752"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-42d1fdafcef7eaf5"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-go-csvvalue-4508cd8d43ac1f95"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-stdlib-46f032dd0b3815ed"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-4982baf6412842c3"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-skratchdot-open-golang-4a0900cb9c1d76f8"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-4ad589c058d460ec"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-4f54d7e7f40138da"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-501eaf1aff73d9ce"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-507776413a4d4ef8"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-attestation-512998fe5d8d6e06"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-52def390eaa09ca0"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-55726825a3b1cf44"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-59519fd8db2f78e5"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-5fcfb61b0498144b"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-6437dc475d82e5c7"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-locker-65fb6c558e260cd8"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-hashstructure-v2-67172bf9be6f7ff8"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-67bb2e79171c37ba"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-683bef66343f9ea4"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-6baf11e9f0fbcb01"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-morikuni-aec-6bb01b92b9496421"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-6c78021e692745c2"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-6db3d6d5be242180"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-72e395083008cb6c"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-7459a19fa5dd27fc"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-74d0550e7a332a23"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-buger-goterm-77abb4cd656f73b7"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-vt100-797a5552b9ddc867"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-gopkg.in-ini.v1-79879798ca7b6598"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-7cf56c8831258f19"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-83eb7516335d2c91"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-continuity-8456c37e3c18fb5d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-8c0c0f65050a5268"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-8c4e841eb246af70"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-90871181fef8f5bf"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-924487eea58b2ab8"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-93bcb0c043d3acfe"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-98c202cbcc653a64"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-99456aba66c25b32"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-9daaf2cdcd03dcf8"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-9e375e55b8387fdc"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-proto-otlp-9e7992c0dc69850b"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-9f19b8b019badb76"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-shibumi-go-pathspec-a4ab888c203adb1c"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-a68051f4446f0e9f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-a9d27f35b4801587"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetricgrpc-ac032067a5dea847"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-af07d1a20d09540d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-capability-b1bbdd7795eca14f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-buildx-b1f3e3fbc3e3a72b"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-b40698868666b597"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-b4bc728ada32e44f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-fvbommel-sortorder-b679bab624c2154c"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-b771c289e14969c3"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.uber.org-mock-b7ccb0ea60b532fd"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-xhit-go-str2duration-v2-b7fbd95e47047f77"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-badeb3cd397d4f8c"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-httptrace-otelhttptrace-bb242e198b9633b8"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-bcdf2f34a3542920"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-bdf219fd640dbdcc"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-bdff8e6861f4570d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-be303fd48a08884f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tilt-dev-fsnotify-bed7d4a3d027149f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-inhies-go-bytesize-c0a5e5ca1316b1ac"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-console-c183c9ff64f16b69"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-c342c82df7f3edc4"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-go-archive-c611e2963eed5cea"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-compose-spec-compose-go-v2-ca242084bae65772"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-cea8412818117e86"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-cead070fa230aa06"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracegrpc-cf44f7206d714a75"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-golang-protobuf-cfe1d3573f2ae816"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-cff1aff0b2e32ca0"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-gogo-protobuf-d0ec500fb5f4426a"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracehttp-d340e3db3c50ff50"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-eiannone-keyboard-d35ad953985650ef"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-d3a287b2e7deefae"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-go-d3dd8d05f5b55fcb"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-d42b3fed7243d79e"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-d5f8e695e9f40fdc"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-d96feb939fdf6e2b"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-de2af1ee700f3050"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-e05b802d4c739350"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-signal-e43aab8d72646da4"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-e4a8d5fc081dab49"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetrichttp-e717bcee3591076d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-e7b55b31bc615d10"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-buildkit-ea7700de87b911cc"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-edcec86d09998eaf"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-symlink-f13fe148322e3922"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-f1624cc1b0728cc4"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-f1c97239aac0af23"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-f54670566baa795e"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mgutz-ansi-f600dd1392cdb704"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-feccf442a74d3dc3"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-ffe195c99ba942be"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-AlecAivazis-survey-v2-3da429059191132c",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-DefangLabs-secret-detector-33d7f3031f18e60b",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-a9d27f35b4801587",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-buger-goterm-77abb4cd656f73b7",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-52def390eaa09ca0",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-edcec86d09998eaf",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-compose-spec-compose-go-v2-ca242084bae65772",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-console-c183c9ff64f16b69",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-6437dc475d82e5c7",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-e4a8d5fc081dab49",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-continuity-8456c37e3c18fb5d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-f54670566baa795e",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-3b824a1ff8a4f4f7",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-log-be303fd48a08884f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-platforms-cff1aff0b2e32ca0",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-bdff8e6861f4570d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-af07d1a20d09540d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-distribution-reference-8c0c0f65050a5268",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-buildx-b1f3e3fbc3e3a72b",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-cli-67bb2e79171c37ba",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-5856f5f4b2a7508f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-103c38d8f059fb8b",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-2d1b40976cd7cd17",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-connections-83eb7516335d2c91",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-units-d5f8e695e9f40fdc",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-eiannone-keyboard-d35ad953985650ef",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-3bb70101280d2a9f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fvbommel-sortorder-b679bab624c2154c",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-374f772f2c419ea6",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-9daaf2cdcd03dcf8",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-6c78021e692745c2",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gofrs-flock-41ec91f21f4d1752",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gogo-protobuf-d0ec500fb5f4426a",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-cead070fa230aa06",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-protobuf-cfe1d3573f2ae816",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-cmp-feccf442a74d3dc3",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-shlex-1f2cce834427de68",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-29bebb5a9a7caeff",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-e7b55b31bc615d10",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-e05b802d4c739350",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-ffe195c99ba942be",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-924487eea58b2ab8",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-d42b3fed7243d79e",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-in-toto-attestation-512998fe5d8d6e06",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-in-toto-in-toto-golang-268463556d8d7404",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-inhies-go-bytesize-c0a5e5ca1316b1ac",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-5fcfb61b0498144b",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kballard-go-shellquote-1726b9dbc74762e6",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-compress-badeb3cd397d4f8c",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-9f19b8b019badb76",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-3c29dab2881b7019",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-044e905cd29d7851",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-7459a19fa5dd27fc",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mgutz-ansi-f600dd1392cdb704",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-hashstructure-v2-67172bf9be6f7ff8",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-buildkit-ea7700de87b911cc",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-b4bc728ada32e44f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-go-archive-c611e2963eed5cea",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-locker-65fb6c558e260cd8",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-api-90871181fef8f5bf",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-client-cea8412818117e86",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-9e375e55b8387fdc",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-f1624cc1b0728cc4",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-capability-b1bbdd7795eca14f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-683bef66343f9ea4",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-signal-e43aab8d72646da4",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-symlink-f13fe148322e3922",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-user-93bcb0c043d3acfe",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-userns-7cf56c8831258f19",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-term-29c02a7dfadc643e",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-morikuni-aec-6bb01b92b9496421",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-74d0550e7a332a23",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-501eaf1aff73d9ce",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-59519fd8db2f78e5",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-errors-8c4e841eb246af70",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-201ce3f124e06c98",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-rivo-uniseg-0cf57d953cdb0946",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-a68051f4446f0e9f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-98c202cbcc653a64",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-shibumi-go-pathspec-a4ab888c203adb1c",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-bcdf2f34a3542920",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-go-d3dd8d05f5b55fcb",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-020e75b5e44f7777",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-skratchdot-open-golang-4a0900cb9c1d76f8",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cobra-42d1fdafcef7eaf5",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-4982baf6412842c3",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tilt-dev-fsnotify-bed7d4a3d027149f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-c342c82df7f3edc4",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-fsutil-34f78336f0393aba",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-go-csvvalue-4508cd8d43ac1f95",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-units-12b6e9a488d4b118",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-vt100-797a5552b9ddc867",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xhit-go-str2duration-v2-b7fbd95e47047f77",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-03a28bbe6b8b37b7",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-4f54d7e7f40138da",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-httptrace-otelhttptrace-bb242e198b9633b8",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-4ad589c058d460ec",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-f1c97239aac0af23",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetricgrpc-ac032067a5dea847",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetrichttp-e717bcee3591076d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-72e395083008cb6c",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracegrpc-cf44f7206d714a75",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracehttp-d340e3db3c50ff50",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-086ef37d2e5e9bb4",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-02a4f3637f5d7815",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-bdf219fd640dbdcc",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-d3a287b2e7deefae",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-proto-otlp-9e7992c0dc69850b",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.uber.org-mock-b7ccb0ea60b532fd",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-d96feb939fdf6e2b",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-55726825a3b1cf44",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-27affcaf156c2108",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-de2af1ee700f3050",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-6db3d6d5be242180",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-term-b40698868666b597",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-b771c289e14969c3",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-time-058992faf7c49535",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-507776413a4d4ef8",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-28b574b125de7bd9",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-41af9f36b42bdd68",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-99456aba66c25b32",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-ini.v1-79879798ca7b6598",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-04632e27eac6a616",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-gotest.tools-v3-1ead701c6fb6f5ab",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-stdlib-46f032dd0b3815ed",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-6baf11e9f0fbcb01",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-sbom-binary",
        "relationshipType": "DESCRIBES",
        "spdxElementId": "SPDXRef-DOCUMENT"
      }
    ],
    "spdxVersion": "SPDX-2.3"
  }
}