{
  "_type": "https://in-toto.io/Statement/v0.1",
  "predicateType": "https://spdx.dev/Document",
  "subject": [
    {
      "name": "docker-compose-linux-s390x",
      "digest": {
        "sha256": "5bd0db672b07bb86272e84bbddd286f42fe9b84080e4d47ad3a91a84bd8c2c3d"
      }
    }
  ],
  "predicate": {
    "SPDXID": "SPDXRef-DOCUMENT",
    "creationInfo": {
      "created": "2026-05-20T14:51:10Z",
      "creators": [
        "Organization: Anchore, Inc",
        "Tool: syft-v1.40.0"
      ],
      "licenseListVersion": "3.27"
    },
    "dataLicense": "CC0-1.0",
    "documentNamespace": "https://anchore.com/syft/dir/sbom-binary-ea3de053-6589-4321-8574-6f185afadad4",
    "files": [
      {
        "SPDXID": "SPDXRef-File-docker-compose-692def66df504244",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "5bd0db672b07bb86272e84bbddd286f42fe9b84080e4d47ad3a91a84bd8c2c3d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "fileName": "docker-compose",
        "fileTypes": [
          "APPLICATION",
          "BINARY"
        ],
        "licenseConcluded": "NOASSERTION",
        "licenseInfoInFiles": [
          "NOASSERTION"
        ]
      }
    ],
    "name": "sbom-binary",
    "packages": [
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-AlecAivazis-survey-v2-6ab3b2bdabc5a619",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e88feef05bf2b5d1ac8289eb62c567dadf2de108919e1e90493aa49212224a34"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:AlecAivazis:survey\\/v2:v2.3.7:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/AlecAivazis/survey/v2@v2.3.7",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/AlecAivazis/survey/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.3.7"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-DefangLabs-secret-detector-af553ba7b4685e8d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "adde1b3af2a60c8c7459e4eff50cfe86086c8328e290588faec7971e529ea4ed"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:DefangLabs:secret-detector:v0.0.0-20250403165618-22662109213e:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:DefangLabs:secret_detector:v0.0.0-20250403165618-22662109213e:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/DefangLabs/secret-detector@v0.0.0-20250403165618-22662109213e",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/DefangLabs/secret-detector",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20250403165618-22662109213e"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-40777e199e96ad5a",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "962719245c36470a4732a78a4c26248adb0fa873714e677848d479afde0518cf"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:acarl005:stripansi:v0.0.0-20180116102854-5a71ef0e047d:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/acarl005/stripansi@v0.0.0-20180116102854-5a71ef0e047d",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/acarl005/stripansi",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20180116102854-5a71ef0e047d"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-buger-goterm-72fabb2dcfe8be0a",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "67d62f1a63a287cd4fd056d5b44613145e98b1283149428485ffdff5b4cc5db6"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:buger:goterm:v1.0.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/buger/goterm@v1.0.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/buger/goterm",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-30b7ca4d56e06600",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "64df8831aef9dca7d7e6177cbd568c8b18e7a91677cbc0ae24a44a8f5c5cb123"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:cenkalti:backoff\\/v5:v5.0.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/cenkalti/backoff/v5",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v5.0.3"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-b6a43dafd6a6023f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "50bf35e7153d4aab059626f3ba08338d786883b6cbea85fd05b3599cbd9416fb"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/cespare/xxhash/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.3.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-compose-spec-compose-go-v2-ae56b758a74146d4",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c68abfa28b6020be93b0799b247ae4ba1efe6f38e13d5dcd1dfb4744f3f25573"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose-spec:compose-go\\/v2:v2.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose-spec:compose_go\\/v2:v2.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose_spec:compose-go\\/v2:v2.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose_spec:compose_go\\/v2:v2.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose:compose-go\\/v2:v2.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose:compose_go\\/v2:v2.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/compose-spec/compose-go/v2@v2.11.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/compose-spec/compose-go/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.11.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-console-f862804df717d2f7",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "474ca635ec9d46a1f60e66a414d7668d1da4d2ded43ee88e57f37fdbbfeaaac7"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:console:v1.0.5:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/console@v1.0.5",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/console",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.5"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-d4f94aaa64a99d52",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e67d281d8541c0de158685fd7c5ca4095f5d175fc1bc05de83617c5ba518ab5a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:containerd\\/api:v1.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/containerd/api@v1.10.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/containerd/api",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.10.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-921a7db2410d20f8",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "98e0512da1c6be6832d1b468d5283a383f2e80c29922f0a859631e30cca09620"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:containerd\\/v2:v2.2.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/containerd/v2@v2.2.3",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/containerd/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.2.3"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-continuity-6f419e8200f160ad",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "651a0dd6c5eaf6eed5e90a0731c5561a13b00c5a99e01f62e47eae9f55a1d31e"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:continuity:v0.4.5:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/continuity@v0.4.5",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/continuity",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.4.5"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-82bc5f12c666df7f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "b60e7221f225408af162dbbd6a3a98e365b79694b5f57a9dc5141e130606f0f2"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v1.0.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/errdefs",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-45b3ef309e506cfc",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "f48289d3a16fc8d95ec56ebdd035ee40dc76280d9c5095f1d79d57771dd93cf1"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:errdefs\\/pkg:v0.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/errdefs/pkg",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.3.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-log-9c4b9c559ab5fa9f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "4c226dee2a0cd9caffb5f47c18f6c67fdfd54405fc0f60783e3cc2a5f5f9e342"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:log:v0.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/log@v0.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/log",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-platforms-310875436ee43c97",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "338d89ad44f8cdf653aad914c24af41b399459b7f23b954ed10e5bde8a7ded3e"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:platforms:v1.0.0-rc.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/platforms",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.0-rc.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-a7226cf30a82d270",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c5b56ee83e2a1768e285d87dac354e2aa50c88505093a61cb53768d73934f3b6"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:ttrpc:v1.2.8:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/ttrpc@v1.2.8",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/ttrpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.2.8"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-61e48674c4f054ed",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c8d03ff78cf159dbd80027583bcce87e1ad356e418ef77c5535cbef9d612c38d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:typeurl\\/v2:v2.2.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/typeurl/v2@v2.2.3",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/typeurl/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.2.3"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-distribution-reference-7b40b9b14565e66a",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "d085c2439838fd03071e46ab63387997ebbc4f7b7bdf333942f7eb0f2220c419"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:distribution:reference:v0.6.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/distribution/reference@v0.6.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/distribution/reference",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.6.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-buildx-1927d2196323775f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c6e65eb907bf0bfdadbcb0e088803af989eadc515649fb06356207337ab5843f"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:buildx:v0.33.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/buildx@v0.33.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/buildx",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.33.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-cli-181c3624672f0551",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "362b9f2c026845c3dab85a01358b617ee33844417033c1f687dc672c004d1c6b"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:cli:v29.5.1\\+incompatible:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/cli@v29.5.1%2Bincompatible",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/cli",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v29.5.1+incompatible"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:compose\\/v5:v5.1.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/compose/v5@v5.1.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/compose/v5",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v5.1.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-d207ca90e467e260",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0c15f4634cc08d96d2ae6d6ecce91daf5a2756084a69fb639525ade0015ec733"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:docker:v28.5.2\\+incompatible:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/docker@v28.5.2%2Bincompatible",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/docker",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v28.5.2+incompatible"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-f969b1f9f458118d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "10534df031ef6a22bccd5a850360d3e818d71341b37cb399dfc8203d329e3e46"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.5:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.5:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.5",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/docker-credential-helpers",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.9.5"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-connections-6dcb9d5e8090a2db",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e92b117c975d3f6d9632b0a48f5f71f562a31034c1f9a86c7621987f498ddfd7"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:go-connections:v0.7.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:go_connections:v0.7.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/go-connections@v0.7.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/go-connections",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.7.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-units-12dfa4c363464cbd",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "ebdaf15dc064dbb4af49a6b14ed2e1ffc9657070fcbd81d3ed649d459fe3bebe"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/go-units@v0.5.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/go-units",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.5.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-eiannone-keyboard-823860eebd1e01a6",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "5c10477086f6e7a81426d2e6636da7f7d1da653cfeaf6679d7150f8b4d66df08"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:eiannone:keyboard:v0.0.0-20220611211555-0d226195f203:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/eiannone/keyboard@v0.0.0-20220611211555-0d226195f203",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/eiannone/keyboard",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20220611211555-0d226195f203"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-c237ddfd6e3fed88",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3454d5d998f56cbe2673db2a5800976d01550418365b718fbeaa7cfc4492d968"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.0.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/felixge/httpsnoop",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-fvbommel-sortorder-4a180fa9e1840cde",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "7d49a87be1cbb014dcb410e8681c29428e4dfa7ac2a7c83f06329bffa650998c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:fvbommel:sortorder:v1.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/fvbommel/sortorder@v1.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/fvbommel/sortorder",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-725649b9e7b7a3c5",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0a39c3947abc8a47fa138f76aba78a6e818e0b44fc08368ebe41c2220f227442"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go:logr:v1.4.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.3",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/go-logr/logr",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.4.3"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-087bffbac0a66254",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8525b11e8a93816d92daa19cd0b4c0239eb7299e582984614f730529931b8da8"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/go-logr/stdr",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.2.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-84a15c1e2c87c30e",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "bcce48268500cb777bcd1495b48c108018fb0625ad30f7e63c48005e7be3d51a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/go-viper/mapstructure/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.5.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-gofrs-flock-466288cd0f5bea53",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "f792689583af18ca9e1f7d7e142ec3dbeb942dfea61bad66119fc0f1d458333c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:gofrs:flock:v0.13.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/gofrs/flock@v0.13.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/gofrs/flock",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.13.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-gogo-protobuf-94477ef191972a8d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3afd5cbdce7c505ddbe578c19d9bfbfa8a5c4dc40565e6d88d6ce2df8bdd9b84"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:gogo:protobuf:v1.3.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/gogo/protobuf@v1.3.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/gogo/protobuf",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.3.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-2f97e2bc9596623a",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "a6fe00b0a08a299baa960b39b149a7e31f149466b490456dfe9b93a4ac7dbefa"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang-jwt:jwt\\/v5:v5.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang_jwt:jwt\\/v5:v5.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:jwt\\/v5:v5.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/golang-jwt/jwt/v5",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v5.3.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-golang-protobuf-709d44de85dbc49d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8bb7892fca994e94845ce3d3c4d2a1012629327fbc7b943a01d9dd55ad5d59e9"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:protobuf:v1.5.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/golang/protobuf@v1.5.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/golang/protobuf",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.5.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-cmp-28765bb57a686f04",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c24f37f36113b2fe0961467022c9fa6296225a206c60b489893b320726d5b8df"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/google/go-cmp@v0.7.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/google/go-cmp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.7.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-google-shlex-759302bfd8775aac",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "125e8ce244d308e87a68188a694186ee861348f3fc331a8be182379192b070fe"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:shlex:v0.0.0-20191202100458-e7afc7fbc510:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/google/shlex@v0.0.0-20191202100458-e7afc7fbc510",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/google/shlex",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20191202100458-e7afc7fbc510"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-cd60808f2b9d41de",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "348bda24330eb231c0f27d630212d2833ac0cf2d4782bfa136b6f9edefbde05d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/google/uuid",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.6.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-c79f695d0f3c59d2",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1d6461e51dbef4489f33220757b655f8c219aa0cfe3cca59d782729efdced99b"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc-ecosystem:grpc-gateway\\/v2:v2.28.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc-ecosystem:grpc_gateway\\/v2:v2.28.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc_ecosystem:grpc-gateway\\/v2:v2.28.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc_ecosystem:grpc_gateway\\/v2:v2.28.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc:grpc-gateway\\/v2:v2.28.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc:grpc_gateway\\/v2:v2.28.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.28.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.28.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-1430a8ee84dd8b24",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3b1ace7a1ef91145cc63c4c18da8367f35c6678d0b07a20ac38e587865036362"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/hashicorp/errwrap",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-fdbd064022bb782a",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "d37e452982168e650bc8544128fb3c4c14288b4c7a77d1b8c5cf677972560194"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/hashicorp/go-cleanhttp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.5.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-997d5e99f7f0f990",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1f90e412d7fa097745a74374126e540b04295cc5a47bc200d3e943e3c6b0318a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/hashicorp/go-multierror",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-c90171af4cc2248a",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "09e388cfa93e2e8377a97f59d2dc90acfb620750c56113df08806d6973d20a70"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go-version:v1.9.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go_version:v1.9.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/hashicorp/go-version@v1.9.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/hashicorp/go-version",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.9.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-in-toto-attestation-072e8020e8f0bb06",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "301167ea5b0caba769b506490616a55d371631bfda272dd5f865f75588ff5751"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in-toto:attestation:v1.1.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in_toto:attestation:v1.1.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in:attestation:v1.1.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/in-toto/attestation@v1.1.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/in-toto/attestation",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-in-toto-in-toto-golang-bde2138486fff3ce",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "facd9e65048add69967d857ce6a5d54817ea81ac22ff92f4d8c6aa038a3fb693"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in-toto:in-toto-golang:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in-toto:in_toto_golang:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in_toto:in-toto-golang:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in_toto:in_toto_golang:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in:in-toto-golang:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in:in_toto_golang:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/in-toto/in-toto-golang@v0.10.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/in-toto/in-toto-golang",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.10.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-inhies-go-bytesize-a10a9ce929932384",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "16d123f2c7c871a6817c02ab1350b06fad580ed62af49c4284ad5cec029c7bbb"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:inhies:go-bytesize:v0.0.0-20220417184213-4913239db9cf:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:inhies:go_bytesize:v0.0.0-20220417184213-4913239db9cf:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/inhies/go-bytesize@v0.0.0-20220417184213-4913239db9cf",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/inhies/go-bytesize",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20220417184213-4913239db9cf"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-558a1c24fccb75c6",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1f287d03cbb9d64a6d76447e72a4694f511e6c1c139f5a0af587c661b745cfa2"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:jonboulle:clockwork:v0.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/jonboulle/clockwork@v0.5.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/jonboulle/clockwork",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.5.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-kballard-go-shellquote-7ae845f02708e3b4",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "67d9f61453545ecb217f024c060340d1153afe2ed655a01e82fdcfb6e2073ccb"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:kballard:go-shellquote:v0.0.0-20180428030007-95032a82bc51:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:kballard:go_shellquote:v0.0.0-20180428030007-95032a82bc51:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/kballard/go-shellquote@v0.0.0-20180428030007-95032a82bc51",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/kballard/go-shellquote",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20180428030007-95032a82bc51"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-compress-0f20e95419ed0882",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "fe1d601f909ef9558d2d25aa3f33959fa5c13bebc96c2346be3a1a181156d881"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:klauspost:compress:v1.18.5:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/klauspost/compress@v1.18.5",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/klauspost/compress",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.18.5"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-565045a3f7e3c6b1",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "f40f4b1d2a85ffb7725555fa83453d7309bda46de43fd812cdcb883c73ec6881"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go-colorable:v0.1.14:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go_colorable:v0.1.14:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mattn/go-colorable@v0.1.14",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mattn/go-colorable",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.1.14"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-03c071ebd8b929dd",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c5f0f4883b842a70e4974deae258a607ebc7f86c4b12d2ff8dbe315494965846"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go-isatty:v0.0.20:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go_isatty:v0.0.20:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mattn/go-isatty@v0.0.20",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mattn/go-isatty",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.20"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-821908b481ee1e24",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "13949c34cb62c2f96f079a5a305770f69e24490cdb5c58a42794903ba4d42d07"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go-runewidth:v0.0.16:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go_runewidth:v0.0.16:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mattn/go-runewidth@v0.0.16",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mattn/go-runewidth",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.16"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-6d7bae8801a1a4ff",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0c2d0e304a468e6e8b7cd154e1c91872f6d02b2a76bc4f1ab721465cdb4371fe"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go-shellwords:v1.0.13:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go_shellwords:v1.0.13:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mattn/go-shellwords@v1.0.13",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mattn/go-shellwords",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.13"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mgutz-ansi-c134f94e4eb55cc2",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8fbfb51e90054b5cf2e7e438ab1d5f5a1f748132b088de10086a18f535b2c8ee"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mgutz:ansi:v0.0.0-20170206155736-9520e82c474b:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20170206155736-9520e82c474b",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mgutz/ansi",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20170206155736-9520e82c474b"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-hashstructure-v2-b547daac6872dfb3",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "bc6296974609a9437113c77e87c7fa3492dc089ae06e10b835c0f8e8a6af0dde"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mitchellh:hashstructure\\/v2:v2.0.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mitchellh/hashstructure/v2@v2.0.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mitchellh/hashstructure/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.0.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-buildkit-718b55fec87ed8b8",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c312c415b08e267b440e348d34dd9859df33c65b59c53e66b834342f3a5bb695"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:buildkit:v0.29.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/buildkit@v0.29.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/buildkit",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.29.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-e9285729c9832e9e",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8cc29f7f7c3a3e06df49aebd19f360fb337f5cb85f5c91a7131dcd97612c14fd"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:docker-image-spec:v1.3.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:docker_image_spec:v1.3.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/docker-image-spec",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.3.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-go-archive-91cf50f79b40383b",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "ce0e500d43369a2d0920cf5f7506560bb53cfb665f8b17d36281cbeeb59470ff"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:go-archive:v0.2.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:go_archive:v0.2.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/go-archive@v0.2.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/go-archive",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.2.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-locker-38d650c0c7987669",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "7ce5ea478d737af7a0e1f14e0e2c7ed428789a3fe04f4344d5725ba7f7a9b818"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:locker:v1.0.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/locker@v1.0.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/locker",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-api-696abe4e827be2c3",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c226adf500219c342303bc24d6487f4ea1f3d88d6e500ecceedf52025fc93578"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:moby\\/api:v1.54.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/moby/api@v1.54.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/moby/api",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.54.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-client-9fccc1c3fed4d196",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0cc4208ac56832498cb3b7e9dd1392762067a00bbcfafa371a0805974e8cff06"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:moby\\/client:v0.4.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/moby/client@v0.4.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/moby/client",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.4.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-87a27620cdb1a65b",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "aa586d69f9abea480c2098ca24c0e6316abb58b90a228db786cae9477c74f385"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:patternmatcher:v0.6.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/patternmatcher@v0.6.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/patternmatcher",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.6.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-cd10bc4bf7e0fbe2",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "930e43fc4aa4070b01162d2cb3dbf5546df0224561cc6bcb92527ec37035e12c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/atomicwriter:v0.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/atomicwriter@v0.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/atomicwriter",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-capability-3eba0ae39f3cca9e",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e03e2623a2a536d58c08cd59fcad22ed15751645fe0c10c72952690a7759a079"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/capability:v0.4.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/capability@v0.4.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/capability",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.4.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-5fdffbc0e41a25b8",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "aabc7b5c551dff90f1b6a7281f5878dfc845e5398ebf30bf96ca63cbbce0bc25"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/sequential:v0.6.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/sequential@v0.6.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/sequential",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.6.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-signal-3e565ad05b043e0e",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3eb43176fc5c1a28dda3a5175e8fe553f4ef1d45b23e18fb50ea52a3cb6ebe4d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/signal:v0.7.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/signal@v0.7.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/signal",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.7.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-symlink-a7fcd0d5ca17e1ba",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1995fcf66119f6ee777fdee7a41cb845cdef24a8fb2410e3fcf376236d86acd5"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/symlink:v0.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/symlink@v0.3.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/symlink",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.3.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-user-811ba7cafed21d07",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8e170c2a2b7b480f34862be614971b075bea9b0fffc14eb565dba2d9e417b8cb"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/user:v0.4.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/user@v0.4.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/user",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.4.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-userns-c1abe620a17518dd",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "b552d79053b156ef40eb8ff2879f6c94756ff5a84ef5421ebf8259bac38b1bf8"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/userns:v0.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/userns@v0.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/userns",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-term-88a0823f37f160c0",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "eaa9371490050ecea2feadd6fe943ded25f5f76a8a7d98068c242a7c22648334"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:term:v0.5.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/term@v0.5.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/term",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.5.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-morikuni-aec-773559800bb340d9",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "bc1065d29527be2fc97bbd5db11ae1301b6b788a8d31812b4806c479bf23ad74"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:morikuni:aec:v1.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/morikuni/aec@v1.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/morikuni/aec",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-75d30f42f1b97265",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "6a93945ace755b93e586ec86cb3f4509e78120e50303fea75bc3a2ff23a18795"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/opencontainers/go-digest",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-055e63f0a002f62f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "cb47d49457c86613c5d56e77ed738b834fdf731eb3707089c28a02db1240d38d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/opencontainers/image-spec",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-37c2ff2453745a7e",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "9b27bd5ee850ea0be7e61dbcf958a52abacfa1055a9f0e4f330fd3074b7911ce"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:pelletier:go-toml\\/v2:v2.2.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:pelletier:go_toml\\/v2:v2.2.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/pelletier/go-toml/v2@v2.2.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/pelletier/go-toml/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.2.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-errors-f775e4bfbbe34dad",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "14404bc75cd2db5e28c298f2eeab017a2c5b51192e850030acae54c0b193c2de"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/pkg/errors",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.9.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-abb8b7a9dd9102e0",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "18508a826a74b5e714274b09bafe29cd80aa4bdf911929f9d8cdc55303ecfaea"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:planetscale:vtprotobuf:v0.6.1-0.20240319094008-0393e58bdf10:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/planetscale/vtprotobuf",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.6.1-0.20240319094008-0393e58bdf10"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-rivo-uniseg-19c76a55ca99b55c",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "59476f916f2e121ad87cb0b8673769236cedc4fd48e7cdbee3d39ce4cabae154"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:rivo:uniseg:v0.4.7:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/rivo/uniseg@v0.4.7",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/rivo/uniseg",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.4.7"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-778c247ddcefe60f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3ca2bd0f21f189fe0b668fae41281736ab348e3e7ec59c307ca1e0a61da5c41c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:santhosh-tekuri:jsonschema\\/v6:v6.0.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:santhosh_tekuri:jsonschema\\/v6:v6.0.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:santhosh:jsonschema\\/v6:v6.0.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/santhosh-tekuri/jsonschema/v6",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v6.0.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-91f7fa1fdc516736",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "97e1f912b716d0f01e84136b071a06bf58e3369198759f51721785901d96235e"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure:go-securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure:go_securesystemslib:v0.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.10.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/secure-systems-lab/go-securesystemslib",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.10.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-shibumi-go-pathspec-a3846d6c81496a31",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "414c8c661168d0c77907ccd5f31dad7aca216dbe647dba538bdac19ca8797642"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:shibumi:go-pathspec:v1.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:shibumi:go_pathspec:v1.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/shibumi/go-pathspec",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.3.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-4c40bdda9b51a98b",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "cad3a6c4c80b75c51e777c3549b6d93a0731ab0306eb5961d539992cdf967991"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:sigstore:sigstore:v1.10.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/sigstore/sigstore@v1.10.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/sigstore/sigstore",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.10.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-go-b15a2a7120ebcd4b",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c134ec8021ce7ea884cd5c81600ea60dccc6b4190dedc33c98fa63263e50bcc8"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:sigstore:sigstore-go:v1.1.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:sigstore:sigstore_go:v1.1.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/sigstore/sigstore-go@v1.1.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/sigstore/sigstore-go",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-7e59028bde6e2411",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "4ec644ee5d75cc508b66767eb5e1f8526a2ae4184421f2337d10d9d54cea976c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:sirupsen:logrus:v1.9.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/sirupsen/logrus@v1.9.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/sirupsen/logrus",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.9.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-skratchdot-open-golang-f63ec8b63342308a",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "24802eab71047fd7206d4e80b463cae024c6dd97fa08a30da9fd0c1d38200140"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:skratchdot:open-golang:v0.0.0-20200116055534-eef842397966:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:skratchdot:open_golang:v0.0.0-20200116055534-eef842397966:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/skratchdot/open-golang@v0.0.0-20200116055534-eef842397966",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/skratchdot/open-golang",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20200116055534-eef842397966"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cobra-e3c329de868638f8",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0cc4d3a27c799bae4873418ea11636735e9609b1f138ec3ac717b3b8b681a5c5"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/spf13/cobra",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.10.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-9f77631ab80d37e4",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e04061d8a01807068e363e9bd987b51a21dfc23ab244ea05e11c183bebcfc059"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/spf13/pflag",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.10"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tilt-dev-fsnotify-337e45f63f5ede84",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "401e78049c00eb1f1053d9c7637c49499476917f5b82965e91128690b4e61170"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tilt-dev:fsnotify:v1.4.8-0.20220602155310-fff9c274a375:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tilt_dev:fsnotify:v1.4.8-0.20220602155310-fff9c274a375:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tilt:fsnotify:v1.4.8-0.20220602155310-fff9c274a375:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tilt-dev/fsnotify@v1.4.8-0.20220602155310-fff9c274a375",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tilt-dev/fsnotify",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.4.8-0.20220602155310-fff9c274a375"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-e1a08a80bbec1b82",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "af4a7b7cae7a97c58f7aab8e691de2f4b06a7cfb447572106d44f34f9e62a93e"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:dchapes-mode:v0.0.0-20250318174251-73d941a28323:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:dchapes_mode:v0.0.0-20250318174251-73d941a28323:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tonistiigi/dchapes-mode@v0.0.0-20250318174251-73d941a28323",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tonistiigi/dchapes-mode",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20250318174251-73d941a28323"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-fsutil-40df19d4b43ce4eb",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "67834443ceaa165d661ee0aef60c1c13e1180b00ca7d70185d96dd217cb19840"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:fsutil:v0.0.0-20251211185533-a2aa163d723f:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tonistiigi/fsutil@v0.0.0-20251211185533-a2aa163d723f",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tonistiigi/fsutil",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20251211185533-a2aa163d723f"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-go-csvvalue-3e9ea1fc943cec0f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "d9fdf4e01d742da65d07c9245446a85ef00c55a9f6b65f4088ae06d2876342d1"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:go-csvvalue:v0.0.0-20240814133006-030d3b2625d0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:go_csvvalue:v0.0.0-20240814133006-030d3b2625d0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tonistiigi/go-csvvalue@v0.0.0-20240814133006-030d3b2625d0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tonistiigi/go-csvvalue",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20240814133006-030d3b2625d0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-units-1d6b3a70101613db",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "4978532c4ea96fa7a577fbff7029dd2b400ca6dd7089515bfd8626a81dff406d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:units:v0.0.0-20180711220420-6950e57a87ea:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tonistiigi/units@v0.0.0-20180711220420-6950e57a87ea",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tonistiigi/units",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20180711220420-6950e57a87ea"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-vt100-91c050f35c07553f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1fa689d32290d20178f506f6cf9848d541f1490b7824ccb179b151d792a7029c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:vt100:v0.0.0-20240514184818-90bafcd6abab:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tonistiigi/vt100@v0.0.0-20240514184818-90bafcd6abab",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tonistiigi/vt100",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20240514184818-90bafcd6abab"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-xhit-go-str2duration-v2-1c4b4dc26999721c",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "971925734d83ae1eb29ea5fe0dd3f2a79a4228b510a514fc6e9f1876ed81b2d7"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:xhit:go-str2duration\\/v2:v2.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:xhit:go_str2duration\\/v2:v2.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/xhit/go-str2duration/v2@v2.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/xhit/go-str2duration/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-dd6826cf7c5f29d1",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8d7b272782e69ea775d64c24055d8b80ba053192a2cdb0a2e5f359fe2a5a67ae"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/auto/sdk",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.2.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-017e548243084b75",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "607e20f2542ba1a8ea53059babfb6bd905f52459845da0cb806f9ec3d6cb316a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/google.golang.org\\/grpc\\/otelgrpc:v0.63.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.63.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.63.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-httptrace-otelhttptrace-b029a92bf0218a81",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "da99fb3b331ec2661188db6fd5da199cba3780e35c9cc1e516798e47c560b7ef"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/httptrace\\/otelhttptrace:v0.63.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.63.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.63.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-caf9116b20bc61e9",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "45b2aaf011b4148f0e8978417dc46daaa1dc65c91afa053772c90db9fd39475f"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.63.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.63.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.63.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-af031c37efb6795e",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "99820cd37767879cdf37b1dabad144e227888a0f5a9a4340353fb1715c408fd2"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.43.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.43.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetricgrpc-af78b55ae003750f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "31d2ae70f97f1dbcdc9165848ac88da8c3e146b00e417f2be234ee1abeb7ea09"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:exporters\\/otlp\\/otlpmetric\\/otlpmetricgrpc:v1.42.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc@v1.42.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.42.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetrichttp-7bb1db49760512bd",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1fb3ba46518e3138b3ca5dd1d3c2a7e6974cd3a6e71fca2c7128fba35d6d98b0"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:exporters\\/otlp\\/otlpmetric\\/otlpmetrichttp:v1.42.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.42.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.42.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-47e4ba3001d92dc0",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "4c7b998b0a5066e1cfba5eb9c3859cc049e45f6408b8c4fe505a0eaf282da09c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:exporters\\/otlp\\/otlptrace:v1.42.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.42.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.42.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracegrpc-569a7e624e1e3617",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "cd65ab07553a9ea852fe4eb3601ef80a3469ba28ad46d2cb8baf1572098e12da"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:exporters\\/otlp\\/otlptrace\\/otlptracegrpc:v1.42.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.42.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.42.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracehttp-045aad0ac65f4b57",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "b8b5cffb79a085f31fed7995e0f9067c58452ae356a02befc79c0fff0397a34a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:exporters\\/otlp\\/otlptrace\\/otlptracehttp:v1.42.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.42.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.42.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-47ea3268db939ba1",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "77beb7f107889ce9eec0e38d3e9e0900e19f6c212961bf8ae83556bddc46ce03"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:metric:v1.43.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.43.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/metric",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.43.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-4becfb58acebb18e",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "a62e6613cea2e6b4de2d7aa817f861881b5435cac01872ca41d860e21e15f438"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:sdk:v1.43.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/sdk",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.43.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-68ab1b81be9908a9",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "4bcf1dcaa5e3264b8134b78c7153d1157a51c367eec1dbdf0862c4a3cf5f0e4c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:sdk\\/metric:v1.43.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.43.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/sdk/metric",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.43.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-899e773233ae8b82",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "06436b1e9ba9fb8938c3e659f3a099a071c4928870b3c018f964d7d3d9e4fb70"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:trace:v1.43.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.43.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/trace",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.43.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-proto-otlp-44e4541d0448e2ed",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "97bd3a8c23084d5a2e3cea849e28b67c802e3b721518144f5792028dc7916ff0"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:proto:otlp:v1.9.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.9.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/proto/otlp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.9.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.uber.org-mock-87b9c1fa7316e15b",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "87217d75f99b8085f911f39d6aca8bb160fac6aa4d6655db94b07f0db9f0bf76"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.uber.org/mock@v0.6.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.uber.org/mock",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.6.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-7b35bec47fb77ea9",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "50fe3ebfa7c5ac121bd65f77e1b0e5fff9a69e82191032b489d835f8022f5f95"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:yaml:v4:v4.0.0-rc.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.yaml.in/yaml/v4@v4.0.0-rc.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.yaml.in/yaml/v4",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v4.0.0-rc.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-4acaf591f4d1df15",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "fd547356a8914a0827858ee0351c4f6ae110e43af0f6168a74cd23a9f70216db"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go:ssh:v0.48.0:*:*:*:*:go:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.48.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/crypto",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.48.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-61511e6782ccc72b",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "f7847f1933bb9addffe3020aa5c4798241a644b3ae13fda1346796abf181205a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:networking:v0.51.0:*:*:*:*:go:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/net@v0.51.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/net",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.51.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-3fd821f0d74effb7",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "7b43d3a5bee98cef0602d4ecd9d43a8d86b905662532e5f4e3b0dca3fa48b4ee"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.20.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/sync@v0.20.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/sync",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.20.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-a76d13a76a913e6e",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8a5759977278bb378a3f4eebd85fbe3a9ec4f41dbd251532f9adbb1226ed0534"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.44.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/sys@v0.44.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/sys",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.44.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-term-4ba59ddf47f0520d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "40280fb28fd0dd14c9c764e1e1b0cba8c2f85ba88989a5c5ab6fdfb50175dd85"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:x\\/term:v0.41.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/term@v0.41.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/term",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.41.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-c5b12be211ddf774",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "a0bfd0ab429d6aac5ad4a6cd78c2b042ad2b78b082685b6abb678db9278d1db9"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:text:v0.34.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/text@v0.34.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/text",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.34.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-time-c8c00be2c60c0852",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "311c7851a2eb0e8b5429474222accf0b8f2dd58f6100d14a211a4dc7e4def0f2"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:x\\/time:v0.14.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/time@v0.14.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/time",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.14.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-7284ae82b51a3481",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "b6efddb675b5a37c1f6b108e8d22e7e48457e180dc26bb65a73624847846682e"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260226221140-a57be14db171:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260226221140-a57be14db171",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "google.golang.org/genproto/googleapis/api",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20260226221140-a57be14db171"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-5be289fd7f510897",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "82071b8aa2bc59687a97576796d538060586206a3e11563109a00f8a1ff34174"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260226221140-a57be14db171:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260226221140-a57be14db171",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "google.golang.org/genproto/googleapis/rpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20260226221140-a57be14db171"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-f32b500e0f3f4797",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "5679c8219f3c53338e28bba4422f88986cfc3b559da7c9c01869ef39f1085904"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:grpc:v1.81.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.81.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "google.golang.org/grpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.81.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-2628418c9615a8cf",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "7d5e99c21368703c812cad1d8fe7e0f1e92d7157a0041b84a25a5b4d0c813551"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.11:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.11",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "google.golang.org/protobuf",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.36.11"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-gopkg.in-ini.v1-9427d9cefd7cbf5f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0e09f1fbafa77c4f887f38d410848d7b274f261f405cd36c59b18ff4acc2b0e0"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/gopkg.in/ini.v1@v1.67.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "gopkg.in/ini.v1",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.67.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-70f487a27f7fc7ca",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "7f1566fc6cc0cc45aa2c7baf72d23dd4a4bd8613669963a85aed174d8252ec20"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "gopkg.in/yaml.v3",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v3.0.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-gotest.tools-v3-568ce77b83184bad",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "ee4a107c829dcbe23c5137adc9c814a975920f0a60bf5f7729afaa46c98163c4"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/gotest.tools/v3@v3.5.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "gotest.tools/v3",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v3.5.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-stdlib-46f032dd0b3815ed",
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:go:1.26.3:-:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/stdlib@1.26.3",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "BSD-3-Clause",
        "name": "stdlib",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "go1.26.3"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-771725007edae1fc",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "467c4d87117524ebba089515a5eb5362fad71ddc70f63f63158819a48f9a9d26"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/tags.cncf.io/container-device-interface@v1.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "tags.cncf.io/container-device-interface",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.0"
      },
      {
        "SPDXID": "SPDXRef-DocumentRoot-Directory-sbom-binary",
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "sbom-binary",
        "primaryPackagePurpose": "FILE",
        "supplier": "NOASSERTION"
      }
    ],
    "relationships": [
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-017e548243084b75"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-03c071ebd8b929dd"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracehttp-045aad0ac65f4b57"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-055e63f0a002f62f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-attestation-072e8020e8f0bb06"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-087bffbac0a66254"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-0f20e95419ed0882"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-12dfa4c363464cbd"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-1430a8ee84dd8b24"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-181c3624672f0551"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-buildx-1927d2196323775f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-rivo-uniseg-19c76a55ca99b55c"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-xhit-go-str2duration-v2-1c4b4dc26999721c"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-units-1d6b3a70101613db"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-2628418c9615a8cf"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-28765bb57a686f04"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-2f97e2bc9596623a"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-30b7ca4d56e06600"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-310875436ee43c97"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tilt-dev-fsnotify-337e45f63f5ede84"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-37c2ff2453745a7e"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-locker-38d650c0c7987669"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-signal-3e565ad05b043e0e"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-go-csvvalue-3e9ea1fc943cec0f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-capability-3eba0ae39f3cca9e"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-3fd821f0d74effb7"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-40777e199e96ad5a"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-fsutil-40df19d4b43ce4eb"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-proto-otlp-44e4541d0448e2ed"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-45b3ef309e506cfc"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-gofrs-flock-466288cd0f5bea53"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-stdlib-46f032dd0b3815ed"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-47e4ba3001d92dc0"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-47ea3268db939ba1"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-fvbommel-sortorder-4a180fa9e1840cde"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-4acaf591f4d1df15"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-4ba59ddf47f0520d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-4becfb58acebb18e"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-4c40bdda9b51a98b"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-558a1c24fccb75c6"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-565045a3f7e3c6b1"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-gotest.tools-v3-568ce77b83184bad"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracegrpc-569a7e624e1e3617"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-5be289fd7f510897"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-5fdffbc0e41a25b8"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-61511e6782ccc72b"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-61e48674c4f054ed"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-68ab1b81be9908a9"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-696abe4e827be2c3"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-AlecAivazis-survey-v2-6ab3b2bdabc5a619"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-6d7bae8801a1a4ff"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-6dcb9d5e8090a2db"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-continuity-6f419e8200f160ad"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-golang-protobuf-709d44de85dbc49d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-70f487a27f7fc7ca"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-buildkit-718b55fec87ed8b8"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-725649b9e7b7a3c5"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-7284ae82b51a3481"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-buger-goterm-72fabb2dcfe8be0a"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-shlex-759302bfd8775aac"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-75d30f42f1b97265"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-771725007edae1fc"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-morikuni-aec-773559800bb340d9"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-778c247ddcefe60f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-kballard-go-shellquote-7ae845f02708e3b4"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-7b35bec47fb77ea9"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-7b40b9b14565e66a"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetrichttp-7bb1db49760512bd"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-7e59028bde6e2411"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-811ba7cafed21d07"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-821908b481ee1e24"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-eiannone-keyboard-823860eebd1e01a6"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-82bc5f12c666df7f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-84a15c1e2c87c30e"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-87a27620cdb1a65b"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.uber.org-mock-87b9c1fa7316e15b"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-term-88a0823f37f160c0"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-899e773233ae8b82"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-vt100-91c050f35c07553f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-go-archive-91cf50f79b40383b"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-91f7fa1fdc516736"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-921a7db2410d20f8"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-gopkg.in-ini.v1-9427d9cefd7cbf5f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-gogo-protobuf-94477ef191972a8d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-997d5e99f7f0f990"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-9c4b9c559ab5fa9f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-9f77631ab80d37e4"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-9fccc1c3fed4d196"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-inhies-go-bytesize-a10a9ce929932384"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-shibumi-go-pathspec-a3846d6c81496a31"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-a7226cf30a82d270"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-a76d13a76a913e6e"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-symlink-a7fcd0d5ca17e1ba"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-abb8b7a9dd9102e0"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-compose-spec-compose-go-v2-ae56b758a74146d4"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-af031c37efb6795e"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-DefangLabs-secret-detector-af553ba7b4685e8d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetricgrpc-af78b55ae003750f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-httptrace-otelhttptrace-b029a92bf0218a81"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-go-b15a2a7120ebcd4b"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-hashstructure-v2-b547daac6872dfb3"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-b6a43dafd6a6023f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-in-toto-golang-bde2138486fff3ce"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mgutz-ansi-c134f94e4eb55cc2"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-c1abe620a17518dd"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-c237ddfd6e3fed88"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-c5b12be211ddf774"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-c79f695d0f3c59d2"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-c8c00be2c60c0852"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-c90171af4cc2248a"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-caf9116b20bc61e9"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-cd10bc4bf7e0fbe2"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-cd60808f2b9d41de"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-d207ca90e467e260"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-d4f94aaa64a99d52"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-dd6826cf7c5f29d1"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-e1a08a80bbec1b82"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-e3c329de868638f8"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-e9285729c9832e9e"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-f32b500e0f3f4797"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-skratchdot-open-golang-f63ec8b63342308a"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-f775e4bfbbe34dad"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-console-f862804df717d2f7"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-f969b1f9f458118d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-fdbd064022bb782a"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-017e548243084b75"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-03c071ebd8b929dd"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracehttp-045aad0ac65f4b57"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-055e63f0a002f62f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-attestation-072e8020e8f0bb06"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-087bffbac0a66254"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-0f20e95419ed0882"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-12dfa4c363464cbd"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-1430a8ee84dd8b24"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-181c3624672f0551"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-buildx-1927d2196323775f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-rivo-uniseg-19c76a55ca99b55c"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-xhit-go-str2duration-v2-1c4b4dc26999721c"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-units-1d6b3a70101613db"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-2628418c9615a8cf"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-28765bb57a686f04"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-2f97e2bc9596623a"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-30b7ca4d56e06600"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-310875436ee43c97"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tilt-dev-fsnotify-337e45f63f5ede84"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-37c2ff2453745a7e"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-locker-38d650c0c7987669"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-signal-3e565ad05b043e0e"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-go-csvvalue-3e9ea1fc943cec0f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-capability-3eba0ae39f3cca9e"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-3fd821f0d74effb7"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-40777e199e96ad5a"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-fsutil-40df19d4b43ce4eb"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-proto-otlp-44e4541d0448e2ed"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-45b3ef309e506cfc"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-gofrs-flock-466288cd0f5bea53"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-stdlib-46f032dd0b3815ed"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-47e4ba3001d92dc0"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-47ea3268db939ba1"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-fvbommel-sortorder-4a180fa9e1840cde"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-4acaf591f4d1df15"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-4ba59ddf47f0520d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-4becfb58acebb18e"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-4c40bdda9b51a98b"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-558a1c24fccb75c6"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-565045a3f7e3c6b1"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-gotest.tools-v3-568ce77b83184bad"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracegrpc-569a7e624e1e3617"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-5be289fd7f510897"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-5fdffbc0e41a25b8"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-61511e6782ccc72b"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-61e48674c4f054ed"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-68ab1b81be9908a9"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-696abe4e827be2c3"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-AlecAivazis-survey-v2-6ab3b2bdabc5a619"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-6d7bae8801a1a4ff"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-6dcb9d5e8090a2db"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-continuity-6f419e8200f160ad"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-golang-protobuf-709d44de85dbc49d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-70f487a27f7fc7ca"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-buildkit-718b55fec87ed8b8"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-725649b9e7b7a3c5"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-7284ae82b51a3481"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-buger-goterm-72fabb2dcfe8be0a"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-shlex-759302bfd8775aac"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-75d30f42f1b97265"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-771725007edae1fc"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-morikuni-aec-773559800bb340d9"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-778c247ddcefe60f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-kballard-go-shellquote-7ae845f02708e3b4"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-7b35bec47fb77ea9"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-7b40b9b14565e66a"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetrichttp-7bb1db49760512bd"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-7e59028bde6e2411"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-811ba7cafed21d07"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-821908b481ee1e24"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-eiannone-keyboard-823860eebd1e01a6"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-82bc5f12c666df7f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-84a15c1e2c87c30e"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-87a27620cdb1a65b"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.uber.org-mock-87b9c1fa7316e15b"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-term-88a0823f37f160c0"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-899e773233ae8b82"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-vt100-91c050f35c07553f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-go-archive-91cf50f79b40383b"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-91f7fa1fdc516736"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-921a7db2410d20f8"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-gopkg.in-ini.v1-9427d9cefd7cbf5f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-gogo-protobuf-94477ef191972a8d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-997d5e99f7f0f990"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-9c4b9c559ab5fa9f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-9f77631ab80d37e4"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-9fccc1c3fed4d196"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-inhies-go-bytesize-a10a9ce929932384"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-shibumi-go-pathspec-a3846d6c81496a31"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-a7226cf30a82d270"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-a76d13a76a913e6e"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-symlink-a7fcd0d5ca17e1ba"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-abb8b7a9dd9102e0"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-compose-spec-compose-go-v2-ae56b758a74146d4"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-af031c37efb6795e"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-DefangLabs-secret-detector-af553ba7b4685e8d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetricgrpc-af78b55ae003750f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-httptrace-otelhttptrace-b029a92bf0218a81"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-go-b15a2a7120ebcd4b"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-hashstructure-v2-b547daac6872dfb3"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-b6a43dafd6a6023f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-in-toto-golang-bde2138486fff3ce"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mgutz-ansi-c134f94e4eb55cc2"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-c1abe620a17518dd"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-c237ddfd6e3fed88"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-c5b12be211ddf774"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-c79f695d0f3c59d2"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-c8c00be2c60c0852"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-c90171af4cc2248a"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-caf9116b20bc61e9"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-cd10bc4bf7e0fbe2"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-cd60808f2b9d41de"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-d207ca90e467e260"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-d4f94aaa64a99d52"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-dd6826cf7c5f29d1"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-e1a08a80bbec1b82"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-e3c329de868638f8"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-e9285729c9832e9e"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-f32b500e0f3f4797"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-skratchdot-open-golang-f63ec8b63342308a"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-f775e4bfbbe34dad"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-console-f862804df717d2f7"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-f969b1f9f458118d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-fdbd064022bb782a"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-AlecAivazis-survey-v2-6ab3b2bdabc5a619",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-DefangLabs-secret-detector-af553ba7b4685e8d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-40777e199e96ad5a",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-buger-goterm-72fabb2dcfe8be0a",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-30b7ca4d56e06600",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-b6a43dafd6a6023f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-compose-spec-compose-go-v2-ae56b758a74146d4",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-console-f862804df717d2f7",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-d4f94aaa64a99d52",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-921a7db2410d20f8",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-continuity-6f419e8200f160ad",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-82bc5f12c666df7f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-45b3ef309e506cfc",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-log-9c4b9c559ab5fa9f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-platforms-310875436ee43c97",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-a7226cf30a82d270",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-61e48674c4f054ed",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-distribution-reference-7b40b9b14565e66a",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-buildx-1927d2196323775f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-cli-181c3624672f0551",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-f015fd69d1401332",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-d207ca90e467e260",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-f969b1f9f458118d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-connections-6dcb9d5e8090a2db",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-units-12dfa4c363464cbd",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-eiannone-keyboard-823860eebd1e01a6",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-c237ddfd6e3fed88",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fvbommel-sortorder-4a180fa9e1840cde",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-725649b9e7b7a3c5",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-087bffbac0a66254",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-84a15c1e2c87c30e",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gofrs-flock-466288cd0f5bea53",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gogo-protobuf-94477ef191972a8d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-2f97e2bc9596623a",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-protobuf-709d44de85dbc49d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-cmp-28765bb57a686f04",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-shlex-759302bfd8775aac",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-cd60808f2b9d41de",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-c79f695d0f3c59d2",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-1430a8ee84dd8b24",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-fdbd064022bb782a",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-997d5e99f7f0f990",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-c90171af4cc2248a",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-in-toto-attestation-072e8020e8f0bb06",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-in-toto-in-toto-golang-bde2138486fff3ce",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-inhies-go-bytesize-a10a9ce929932384",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-558a1c24fccb75c6",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kballard-go-shellquote-7ae845f02708e3b4",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-compress-0f20e95419ed0882",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-565045a3f7e3c6b1",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-03c071ebd8b929dd",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-821908b481ee1e24",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-6d7bae8801a1a4ff",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mgutz-ansi-c134f94e4eb55cc2",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-hashstructure-v2-b547daac6872dfb3",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-buildkit-718b55fec87ed8b8",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-e9285729c9832e9e",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-go-archive-91cf50f79b40383b",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-locker-38d650c0c7987669",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-api-696abe4e827be2c3",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-client-9fccc1c3fed4d196",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-87a27620cdb1a65b",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-cd10bc4bf7e0fbe2",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-capability-3eba0ae39f3cca9e",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-5fdffbc0e41a25b8",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-signal-3e565ad05b043e0e",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-symlink-a7fcd0d5ca17e1ba",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-user-811ba7cafed21d07",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-userns-c1abe620a17518dd",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-term-88a0823f37f160c0",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-morikuni-aec-773559800bb340d9",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-75d30f42f1b97265",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-055e63f0a002f62f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-37c2ff2453745a7e",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-errors-f775e4bfbbe34dad",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-abb8b7a9dd9102e0",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-rivo-uniseg-19c76a55ca99b55c",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-778c247ddcefe60f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-91f7fa1fdc516736",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-shibumi-go-pathspec-a3846d6c81496a31",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-4c40bdda9b51a98b",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-go-b15a2a7120ebcd4b",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-7e59028bde6e2411",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-skratchdot-open-golang-f63ec8b63342308a",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cobra-e3c329de868638f8",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-9f77631ab80d37e4",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tilt-dev-fsnotify-337e45f63f5ede84",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-e1a08a80bbec1b82",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-fsutil-40df19d4b43ce4eb",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-go-csvvalue-3e9ea1fc943cec0f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-units-1d6b3a70101613db",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-vt100-91c050f35c07553f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xhit-go-str2duration-v2-1c4b4dc26999721c",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-dd6826cf7c5f29d1",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-017e548243084b75",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-httptrace-otelhttptrace-b029a92bf0218a81",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-caf9116b20bc61e9",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-af031c37efb6795e",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetricgrpc-af78b55ae003750f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetrichttp-7bb1db49760512bd",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-47e4ba3001d92dc0",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracegrpc-569a7e624e1e3617",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracehttp-045aad0ac65f4b57",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-47ea3268db939ba1",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-4becfb58acebb18e",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-68ab1b81be9908a9",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-899e773233ae8b82",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-proto-otlp-44e4541d0448e2ed",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.uber.org-mock-87b9c1fa7316e15b",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-7b35bec47fb77ea9",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-4acaf591f4d1df15",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-61511e6782ccc72b",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-3fd821f0d74effb7",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-a76d13a76a913e6e",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-term-4ba59ddf47f0520d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-c5b12be211ddf774",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-time-c8c00be2c60c0852",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-7284ae82b51a3481",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-5be289fd7f510897",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-f32b500e0f3f4797",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-2628418c9615a8cf",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-ini.v1-9427d9cefd7cbf5f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-70f487a27f7fc7ca",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-gotest.tools-v3-568ce77b83184bad",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-stdlib-46f032dd0b3815ed",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-771725007edae1fc",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-sbom-binary",
        "relationshipType": "DESCRIBES",
        "spdxElementId": "SPDXRef-DOCUMENT"
      }
    ],
    "spdxVersion": "SPDX-2.3"
  }
}