{
  "_type": "https://in-toto.io/Statement/v0.1",
  "predicateType": "https://spdx.dev/Document",
  "subject": [
    {
      "name": "docker-compose-linux-ppc64le",
      "digest": {
        "sha256": "0dfd397c75da17215b8dc9382878807fdbaea0b5cf6084fb96ac656ea0940c38"
      }
    }
  ],
  "predicate": {
    "SPDXID": "SPDXRef-DOCUMENT",
    "creationInfo": {
      "created": "2026-06-23T14:23:38Z",
      "creators": [
        "Organization: Anchore, Inc",
        "Tool: syft-v1.40.0"
      ],
      "licenseListVersion": "3.27"
    },
    "dataLicense": "CC0-1.0",
    "documentNamespace": "https://anchore.com/syft/dir/sbom-binary-4c0aa9be-cc96-45db-885a-06922d5ef368",
    "files": [
      {
        "SPDXID": "SPDXRef-File-docker-compose-692def66df504244",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0dfd397c75da17215b8dc9382878807fdbaea0b5cf6084fb96ac656ea0940c38"
          }
        ],
        "copyrightText": "NOASSERTION",
        "fileName": "docker-compose",
        "fileTypes": [
          "APPLICATION",
          "BINARY"
        ],
        "licenseConcluded": "NOASSERTION",
        "licenseInfoInFiles": [
          "NOASSERTION"
        ]
      }
    ],
    "name": "sbom-binary",
    "packages": [
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-AlecAivazis-survey-v2-a0444b75c34abaaa",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e88feef05bf2b5d1ac8289eb62c567dadf2de108919e1e90493aa49212224a34"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:AlecAivazis:survey\\/v2:v2.3.7:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/AlecAivazis/survey/v2@v2.3.7",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/AlecAivazis/survey/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.3.7"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-DefangLabs-secret-detector-9361503ff538e06e",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "adde1b3af2a60c8c7459e4eff50cfe86086c8328e290588faec7971e529ea4ed"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:DefangLabs:secret-detector:v0.0.0-20250403165618-22662109213e:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:DefangLabs:secret_detector:v0.0.0-20250403165618-22662109213e:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/DefangLabs/secret-detector@v0.0.0-20250403165618-22662109213e",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/DefangLabs/secret-detector",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20250403165618-22662109213e"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-88e7c03a0d8b71c4",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "962719245c36470a4732a78a4c26248adb0fa873714e677848d479afde0518cf"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:acarl005:stripansi:v0.0.0-20180116102854-5a71ef0e047d:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/acarl005/stripansi@v0.0.0-20180116102854-5a71ef0e047d",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/acarl005/stripansi",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20180116102854-5a71ef0e047d"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-buger-goterm-7b0d3f4cd01f9237",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "67d62f1a63a287cd4fd056d5b44613145e98b1283149428485ffdff5b4cc5db6"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:buger:goterm:v1.0.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/buger/goterm@v1.0.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/buger/goterm",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-fe617fa6f8b97ad3",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "64df8831aef9dca7d7e6177cbd568c8b18e7a91677cbc0ae24a44a8f5c5cb123"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:cenkalti:backoff\\/v5:v5.0.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/cenkalti/backoff/v5",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v5.0.3"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-b827f66b7043b4b9",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "50bf35e7153d4aab059626f3ba08338d786883b6cbea85fd05b3599cbd9416fb"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/cespare/xxhash/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.3.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-51676ead64b080f4",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0a1c082a740dde4719b5e4d73206f5c33b5281a53e65e9a481676887082cf2d6"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:clipperhouse:uax29\\/v2:v2.2.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/clipperhouse/uax29/v2@v2.2.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/clipperhouse/uax29/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.2.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-compose-spec-compose-go-v2-85361051481f8b90",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "fb10593717204aeb386ad409c173c47611d18021326668ff06ea8de66df73aed"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose-spec:compose-go\\/v2:v2.12.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose-spec:compose_go\\/v2:v2.12.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose_spec:compose-go\\/v2:v2.12.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose_spec:compose_go\\/v2:v2.12.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose:compose-go\\/v2:v2.12.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose:compose_go\\/v2:v2.12.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/compose-spec/compose-go/v2@v2.12.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/compose-spec/compose-go/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.12.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-console-ce84a24cb6ed8822",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "474ca635ec9d46a1f60e66a414d7668d1da4d2ded43ee88e57f37fdbbfeaaac7"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:console:v1.0.5:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/console@v1.0.5",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/console",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.5"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-a479bd01ae9bab6d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e67d281d8541c0de158685fd7c5ca4095f5d175fc1bc05de83617c5ba518ab5a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:containerd\\/api:v1.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/containerd/api@v1.10.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/containerd/api",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.10.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-e3e9b16d0dd7b55d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "293173074d8bbe262699f466cfcafd50577e9fa62575d5452bee656e04175135"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:containerd\\/v2:v2.2.5:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/containerd/v2@v2.2.5",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/containerd/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.2.5"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-continuity-8e5bc30feaa9b5e9",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "edaf391d9a424acfb5669b3411edc33d2b80598fb448933524d339d679445438"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:continuity:v0.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/continuity@v0.5.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/continuity",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.5.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-6a33c5d05ba2dcf5",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "b60e7221f225408af162dbbd6a3a98e365b79694b5f57a9dc5141e130606f0f2"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v1.0.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/errdefs",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-d3697e5feb943391",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "f48289d3a16fc8d95ec56ebdd035ee40dc76280d9c5095f1d79d57771dd93cf1"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:errdefs\\/pkg:v0.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/errdefs/pkg",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.3.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-log-4b2c029492f47a02",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "4c226dee2a0cd9caffb5f47c18f6c67fdfd54405fc0f60783e3cc2a5f5f9e342"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:log:v0.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/log@v0.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/log",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-platforms-d19d7312ec32e561",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "338d89ad44f8cdf653aad914c24af41b399459b7f23b954ed10e5bde8a7ded3e"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:platforms:v1.0.0-rc.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/platforms",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.0-rc.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-c45a1b8801f12ab0",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c5b56ee83e2a1768e285d87dac354e2aa50c88505093a61cb53768d73934f3b6"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:ttrpc:v1.2.8:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/ttrpc@v1.2.8",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/ttrpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.2.8"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-d3e36f74b8a2d665",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1d91cf8515a8e57332dd0190a0fad4cdb5bfd9c9308dfc1e1e63b096422b3c04"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:typeurl\\/v2:v2.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/typeurl/v2@v2.3.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/typeurl/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.3.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-distribution-reference-60ca433a9620883b",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "d085c2439838fd03071e46ab63387997ebbc4f7b7bdf333942f7eb0f2220c419"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:distribution:reference:v0.6.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/distribution/reference@v0.6.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/distribution/reference",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.6.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-buildx-19a3f64b5c20b77c",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e6bfd97000b4b36a19d573891ef60561b8f8e08e2bc51b0875fb1105e5c2964b"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:buildx:v0.35.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/buildx@v0.35.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/buildx",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.35.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-cli-4ba80031789952e1",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "9f0f618a6c4c319ede21e85eac9365290abe69c9e5cc680777ee2e7f5d104527"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:cli:v29.6.0\\+incompatible:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/cli@v29.6.0%2Bincompatible",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/cli",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v29.6.0+incompatible"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-cli-docs-tool-9aa87edf86a45600",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "eddf1001115bed01286e2ceac6610cedf3ad799107c07ff35a01d0b4764471f1"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:cli-docs-tool:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:cli_docs_tool:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/cli-docs-tool@v0.11.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/cli-docs-tool",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.11.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:compose\\/v5:v5.2.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/compose/v5@v5.2.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/compose/v5",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v5.2.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-6f447696526b0eed",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0c15f4634cc08d96d2ae6d6ecce91daf5a2756084a69fb639525ade0015ec733"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:docker:v28.5.2\\+incompatible:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/docker@v28.5.2%2Bincompatible",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/docker",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v28.5.2+incompatible"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-e8068adb39ed10cb",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "6c844444e6fb4a8e8f465aba293b5d4bd30f1230b6f4e411905365bcad8e5fc4"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.8:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.8:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.8",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/docker-credential-helpers",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.9.8"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-connections-d902d6e89ed5500a",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e92b117c975d3f6d9632b0a48f5f71f562a31034c1f9a86c7621987f498ddfd7"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:go-connections:v0.7.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:go_connections:v0.7.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/go-connections@v0.7.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/go-connections",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.7.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-units-eea84a7505cb170b",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "ebdaf15dc064dbb4af49a6b14ed2e1ffc9657070fcbd81d3ed649d459fe3bebe"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/go-units@v0.5.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/go-units",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.5.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-eiannone-keyboard-32bfc563785f3070",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "5c10477086f6e7a81426d2e6636da7f7d1da653cfeaf6679d7150f8b4d66df08"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:eiannone:keyboard:v0.0.0-20220611211555-0d226195f203:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/eiannone/keyboard@v0.0.0-20220611211555-0d226195f203",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/eiannone/keyboard",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20220611211555-0d226195f203"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-3fb3eeebed9132ff",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3454d5d998f56cbe2673db2a5800976d01550418365b718fbeaa7cfc4492d968"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.0.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/felixge/httpsnoop",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-fvbommel-sortorder-b6a4450d68edb79b",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "7d49a87be1cbb014dcb410e8681c29428e4dfa7ac2a7c83f06329bffa650998c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:fvbommel:sortorder:v1.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/fvbommel/sortorder@v1.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/fvbommel/sortorder",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-1056dbcaffc95e97",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0a39c3947abc8a47fa138f76aba78a6e818e0b44fc08368ebe41c2220f227442"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go:logr:v1.4.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.3",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/go-logr/logr",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.4.3"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-0f660c4163034fa7",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8525b11e8a93816d92daa19cd0b4c0239eb7299e582984614f730529931b8da8"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/go-logr/stdr",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.2.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-fc6fb7d31e048eee",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "bcce48268500cb777bcd1495b48c108018fb0625ad30f7e63c48005e7be3d51a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/go-viper/mapstructure/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.5.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-gofrs-flock-2d70e276aea9769f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "f792689583af18ca9e1f7d7e142ec3dbeb942dfea61bad66119fc0f1d458333c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:gofrs:flock:v0.13.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/gofrs/flock@v0.13.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/gofrs/flock",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.13.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-5cae971fdde02b5f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "9187fcd434d615eeedfb556f2fb792fa32855566949caf5c075a9bc27eb76026"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang-jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang_jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/golang-jwt/jwt/v5",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v5.3.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-cmp-26c491503bea813a",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c24f37f36113b2fe0961467022c9fa6296225a206c60b489893b320726d5b8df"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/google/go-cmp@v0.7.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/google/go-cmp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.7.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-google-shlex-4b1a3f0b78b0008a",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "125e8ce244d308e87a68188a694186ee861348f3fc331a8be182379192b070fe"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:shlex:v0.0.0-20191202100458-e7afc7fbc510:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/google/shlex@v0.0.0-20191202100458-e7afc7fbc510",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/google/shlex",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20191202100458-e7afc7fbc510"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-1a3ef9cf5db0acd7",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "348bda24330eb231c0f27d630212d2833ac0cf2d4782bfa136b6f9edefbde05d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/google/uuid",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.6.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-dea6adbf0ee99670",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e558a99ef1296eaaf6800d956ccfa76156e4205dbc7396507ea081439836c5f9"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc-ecosystem:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc-ecosystem:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc_ecosystem:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc_ecosystem:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.29.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-e2526ff04adbd835",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3b1ace7a1ef91145cc63c4c18da8367f35c6678d0b07a20ac38e587865036362"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/hashicorp/errwrap",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-7abf377f84f4479d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "d37e452982168e650bc8544128fb3c4c14288b4c7a77d1b8c5cf677972560194"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/hashicorp/go-cleanhttp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.5.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-9158d403296edbb7",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1f90e412d7fa097745a74374126e540b04295cc5a47bc200d3e943e3c6b0318a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/hashicorp/go-multierror",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-188d6fdd767f23f7",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "09e388cfa93e2e8377a97f59d2dc90acfb620750c56113df08806d6973d20a70"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go-version:v1.9.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go_version:v1.9.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/hashicorp/go-version@v1.9.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/hashicorp/go-version",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.9.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-in-toto-attestation-8d3bb677e7eecfe7",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "68f4546776b36ea0fbc84043e5f3f74c3f03b337fe607a36f3848e7296a18d09"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in-toto:attestation:v1.2.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in_toto:attestation:v1.2.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in:attestation:v1.2.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/in-toto/attestation@v1.2.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/in-toto/attestation",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.2.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-in-toto-in-toto-golang-6e5b811ebbc7c5f7",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "9df89d318045c7e134967997e4a5273763dd9bccdd34a6a5d5aca326ecf34680"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in-toto:in-toto-golang:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in-toto:in_toto_golang:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in_toto:in-toto-golang:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in_toto:in_toto_golang:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in:in-toto-golang:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in:in_toto_golang:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/in-toto/in-toto-golang@v0.11.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/in-toto/in-toto-golang",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.11.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-inhies-go-bytesize-7aa68813d6cafdb5",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "16d123f2c7c871a6817c02ab1350b06fad580ed62af49c4284ad5cec029c7bbb"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:inhies:go-bytesize:v0.0.0-20220417184213-4913239db9cf:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:inhies:go_bytesize:v0.0.0-20220417184213-4913239db9cf:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/inhies/go-bytesize@v0.0.0-20220417184213-4913239db9cf",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/inhies/go-bytesize",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20220417184213-4913239db9cf"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-7a6229654175e9b1",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1f287d03cbb9d64a6d76447e72a4694f511e6c1c139f5a0af587c661b745cfa2"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:jonboulle:clockwork:v0.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/jonboulle/clockwork@v0.5.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/jonboulle/clockwork",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.5.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-kballard-go-shellquote-275621ee6b618ce7",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "67d9f61453545ecb217f024c060340d1153afe2ed655a01e82fdcfb6e2073ccb"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:kballard:go-shellquote:v0.0.0-20180428030007-95032a82bc51:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:kballard:go_shellquote:v0.0.0-20180428030007-95032a82bc51:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/kballard/go-shellquote@v0.0.0-20180428030007-95032a82bc51",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/kballard/go-shellquote",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20180428030007-95032a82bc51"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-compress-a7133aa652d359d7",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "da3ba92e5030166f79f980d1f8dc03d8c11f14ef5de33e0fae39755d70e3b9aa"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:klauspost:compress:v1.18.6:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/klauspost/compress@v1.18.6",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/klauspost/compress",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.18.6"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-ed0c8afd6fe291d2",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "f40f4b1d2a85ffb7725555fa83453d7309bda46de43fd812cdcb883c73ec6881"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go-colorable:v0.1.14:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go_colorable:v0.1.14:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mattn/go-colorable@v0.1.14",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mattn/go-colorable",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.1.14"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-6111def7432cdba2",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c5f0f4883b842a70e4974deae258a607ebc7f86c4b12d2ff8dbe315494965846"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go-isatty:v0.0.20:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go_isatty:v0.0.20:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mattn/go-isatty@v0.0.20",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mattn/go-isatty",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.20"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-162dcec5b0cf66ac",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "ef2900d13d2390fa734af312e62f6ea0d9f65f2dd1dfcddff470f1dd1c9b59cc"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go-runewidth:v0.0.23:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go_runewidth:v0.0.23:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mattn/go-runewidth@v0.0.23",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mattn/go-runewidth",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.23"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-29b8dcc07e4549ee",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0c2d0e304a468e6e8b7cd154e1c91872f6d02b2a76bc4f1ab721465cdb4371fe"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go-shellwords:v1.0.13:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go_shellwords:v1.0.13:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mattn/go-shellwords@v1.0.13",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mattn/go-shellwords",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.13"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mgutz-ansi-9e1510d4d71ec116",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8fbfb51e90054b5cf2e7e438ab1d5f5a1f748132b088de10086a18f535b2c8ee"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mgutz:ansi:v0.0.0-20170206155736-9520e82c474b:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20170206155736-9520e82c474b",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mgutz/ansi",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20170206155736-9520e82c474b"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-hashstructure-v2-8d26908079566755",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "bc6296974609a9437113c77e87c7fa3492dc089ae06e10b835c0f8e8a6af0dde"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mitchellh:hashstructure\\/v2:v2.0.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mitchellh/hashstructure/v2@v2.0.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mitchellh/hashstructure/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.0.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-buildkit-007c7beb363e5507",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "84c5006d01a08edcc90c3399ea8ecc424e570599014f2ccb584be78e0b871d02"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:buildkit:v0.31.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/buildkit@v0.31.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/buildkit",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.31.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-599af7dfc5d3389f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8cc29f7f7c3a3e06df49aebd19f360fb337f5cb85f5c91a7131dcd97612c14fd"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:docker-image-spec:v1.3.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:docker_image_spec:v1.3.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/docker-image-spec",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.3.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-go-archive-1c227fa1e082c280",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "ce0e500d43369a2d0920cf5f7506560bb53cfb665f8b17d36281cbeeb59470ff"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:go-archive:v0.2.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:go_archive:v0.2.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/go-archive@v0.2.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/go-archive",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.2.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-locker-6953215242ff3e7f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "7ce5ea478d737af7a0e1f14e0e2c7ed428789a3fe04f4344d5725ba7f7a9b818"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:locker:v1.0.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/locker@v1.0.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/locker",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-api-65b93a3fb8b8ec81",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "dbfb1ec6f432a88592f2945208575d05fa56daa13bbd1ec508bfaf37ca71c0c7"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:moby\\/api:v1.55.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/moby/api@v1.55.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/moby/api",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.55.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-client-f8be78a1057be2eb",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e578723e4d9fb8e59fe9195215adcc9082200d9905db9c53a175bc43f047edc7"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:moby\\/client:v0.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/moby/client@v0.5.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/moby/client",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.5.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-a66fd84d72f77c7e",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "aa586d69f9abea480c2098ca24c0e6316abb58b90a228db786cae9477c74f385"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:patternmatcher:v0.6.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/patternmatcher@v0.6.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/patternmatcher",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.6.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-80769eca377b15b6",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "930e43fc4aa4070b01162d2cb3dbf5546df0224561cc6bcb92527ec37035e12c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/atomicwriter:v0.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/atomicwriter@v0.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/atomicwriter",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-capability-665cc7918a78c9d5",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e03e2623a2a536d58c08cd59fcad22ed15751645fe0c10c72952690a7759a079"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/capability:v0.4.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/capability@v0.4.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/capability",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.4.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-2b8a0bd4ecfcb953",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "01240d18d44e252b8e3ba2cbe9b3c76cabee66ee8d53c3f895d3d6937d738fff"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/sequential:v0.7.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/sequential@v0.7.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/sequential",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.7.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-signal-138af3cec38da1ad",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3eb43176fc5c1a28dda3a5175e8fe553f4ef1d45b23e18fb50ea52a3cb6ebe4d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/signal:v0.7.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/signal@v0.7.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/signal",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.7.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-symlink-40fd734d126c6d02",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1995fcf66119f6ee777fdee7a41cb845cdef24a8fb2410e3fcf376236d86acd5"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/symlink:v0.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/symlink@v0.3.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/symlink",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.3.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-user-3b42fb914efadd3c",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8e170c2a2b7b480f34862be614971b075bea9b0fffc14eb565dba2d9e417b8cb"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/user:v0.4.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/user@v0.4.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/user",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.4.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-userns-4ff6dea5fb056fb0",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "b552d79053b156ef40eb8ff2879f6c94756ff5a84ef5421ebf8259bac38b1bf8"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/userns:v0.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/userns@v0.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/userns",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-term-ebd41356d8f6e568",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "eaa9371490050ecea2feadd6fe943ded25f5f76a8a7d98068c242a7c22648334"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:term:v0.5.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/term@v0.5.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/term",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.5.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-morikuni-aec-3e7347929ea8912e",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "bc1065d29527be2fc97bbd5db11ae1301b6b788a8d31812b4806c479bf23ad74"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:morikuni:aec:v1.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/morikuni/aec@v1.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/morikuni/aec",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-b412a2534982091f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "6a93945ace755b93e586ec86cb3f4509e78120e50303fea75bc3a2ff23a18795"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/opencontainers/go-digest",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-56cb2dffd7c30228",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "cb47d49457c86613c5d56e77ed738b834fdf731eb3707089c28a02db1240d38d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/opencontainers/image-spec",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-cc971d6e9be10705",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "31812fbc69d08de364445d6a52e1a894db4d1314c3c1cb79d72a7ba253edac47"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:pelletier:go-toml\\/v2:v2.3.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:pelletier:go_toml\\/v2:v2.3.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/pelletier/go-toml/v2@v2.3.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/pelletier/go-toml/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.3.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-errors-85088c730a1ae449",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "14404bc75cd2db5e28c298f2eeab017a2c5b51192e850030acae54c0b193c2de"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/pkg/errors",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.9.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-f9dfe6673966896d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "18508a826a74b5e714274b09bafe29cd80aa4bdf911929f9d8cdc55303ecfaea"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:planetscale:vtprotobuf:v0.6.1-0.20240319094008-0393e58bdf10:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/planetscale/vtprotobuf",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.6.1-0.20240319094008-0393e58bdf10"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-422b84a5e7bfc513",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3ca2bd0f21f189fe0b668fae41281736ab348e3e7ec59c307ca1e0a61da5c41c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:santhosh-tekuri:jsonschema\\/v6:v6.0.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:santhosh_tekuri:jsonschema\\/v6:v6.0.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:santhosh:jsonschema\\/v6:v6.0.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/santhosh-tekuri/jsonschema/v6",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v6.0.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-4a2ff4f9ba93781a",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8ae091f6470c143e10bab74aac6bcf2e82992eff58bf03d856bd38ef705db45b"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/secure-systems-lab/go-securesystemslib",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.11.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-shibumi-go-pathspec-90055b02f805e548",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "414c8c661168d0c77907ccd5f31dad7aca216dbe647dba538bdac19ca8797642"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:shibumi:go-pathspec:v1.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:shibumi:go_pathspec:v1.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/shibumi/go-pathspec",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.3.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-5cc7b4d97c542146",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "d4c824c6f930e005cc7c83f50ce8dcea4c341a452003ca46569bde37f11f3aae"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:sigstore:sigstore:v1.10.8:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/sigstore/sigstore@v1.10.8",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/sigstore/sigstore",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.10.8"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-go-cc690bef9d6f6bd8",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "6163ffac36c168406fb5b923eb1b70b128f7f190851214d555a74d3978d57b70"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:sigstore:sigstore-go:v1.2.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:sigstore:sigstore_go:v1.2.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/sigstore/sigstore-go@v1.2.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/sigstore/sigstore-go",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.2.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-ad19f1a6529d0080",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "4ec644ee5d75cc508b66767eb5e1f8526a2ae4184421f2337d10d9d54cea976c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:sirupsen:logrus:v1.9.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/sirupsen/logrus@v1.9.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/sirupsen/logrus",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.9.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-skratchdot-open-golang-5fb0ada67c922302",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "24802eab71047fd7206d4e80b463cae024c6dd97fa08a30da9fd0c1d38200140"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:skratchdot:open-golang:v0.0.0-20200116055534-eef842397966:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:skratchdot:open_golang:v0.0.0-20200116055534-eef842397966:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/skratchdot/open-golang@v0.0.0-20200116055534-eef842397966",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/skratchdot/open-golang",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20200116055534-eef842397966"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cobra-b3c96cf426102e3b",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0cc4d3a27c799bae4873418ea11636735e9609b1f138ec3ac717b3b8b681a5c5"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/spf13/cobra",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.10.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-8d1b0aae34326279",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e04061d8a01807068e363e9bd987b51a21dfc23ab244ea05e11c183bebcfc059"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/spf13/pflag",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.10"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tilt-dev-fsnotify-dc778e9578995482",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "401e78049c00eb1f1053d9c7637c49499476917f5b82965e91128690b4e61170"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tilt-dev:fsnotify:v1.4.8-0.20220602155310-fff9c274a375:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tilt_dev:fsnotify:v1.4.8-0.20220602155310-fff9c274a375:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tilt:fsnotify:v1.4.8-0.20220602155310-fff9c274a375:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tilt-dev/fsnotify@v1.4.8-0.20220602155310-fff9c274a375",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tilt-dev/fsnotify",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.4.8-0.20220602155310-fff9c274a375"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-89d715d4f4e29706",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "af4a7b7cae7a97c58f7aab8e691de2f4b06a7cfb447572106d44f34f9e62a93e"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:dchapes-mode:v0.0.0-20250318174251-73d941a28323:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:dchapes_mode:v0.0.0-20250318174251-73d941a28323:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tonistiigi/dchapes-mode@v0.0.0-20250318174251-73d941a28323",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tonistiigi/dchapes-mode",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20250318174251-73d941a28323"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-fsutil-25a888b46d7d7b99",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "b4992ffde747c3d15756d6c7c5ce9ca6a0edb6208b37386a2355b8d1f727c486"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:fsutil:v0.0.0-20260609091201-0257b3308df4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tonistiigi/fsutil@v0.0.0-20260609091201-0257b3308df4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tonistiigi/fsutil",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20260609091201-0257b3308df4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-go-csvvalue-4886f1b2e1cb4a83",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "d9fdf4e01d742da65d07c9245446a85ef00c55a9f6b65f4088ae06d2876342d1"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:go-csvvalue:v0.0.0-20240814133006-030d3b2625d0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:go_csvvalue:v0.0.0-20240814133006-030d3b2625d0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tonistiigi/go-csvvalue@v0.0.0-20240814133006-030d3b2625d0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tonistiigi/go-csvvalue",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20240814133006-030d3b2625d0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-units-f828de1fd2c7d7b2",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "4978532c4ea96fa7a577fbff7029dd2b400ca6dd7089515bfd8626a81dff406d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:units:v0.0.0-20180711220420-6950e57a87ea:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tonistiigi/units@v0.0.0-20180711220420-6950e57a87ea",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tonistiigi/units",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20180711220420-6950e57a87ea"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-vt100-4f29b005d3fa30ee",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1fa689d32290d20178f506f6cf9848d541f1490b7824ccb179b151d792a7029c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:vt100:v0.0.0-20240514184818-90bafcd6abab:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tonistiigi/vt100@v0.0.0-20240514184818-90bafcd6abab",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tonistiigi/vt100",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20240514184818-90bafcd6abab"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-xhit-go-str2duration-v2-dfb69bb258426a47",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "971925734d83ae1eb29ea5fe0dd3f2a79a4228b510a514fc6e9f1876ed81b2d7"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:xhit:go-str2duration\\/v2:v2.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:xhit:go_str2duration\\/v2:v2.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/xhit/go-str2duration/v2@v2.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/xhit/go-str2duration/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-b37ecc307fcde5f7",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8a5415d61cf38aef8b2ccdf3513274b6b473b5fc208ea2a705636d49191b9b03"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:youmark:pkcs8:v0.0.0-20240726163527-a2c0da244d78:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/youmark/pkcs8",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20240726163527-a2c0da244d78"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-51a72a5620cf8c27",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8d7b272782e69ea775d64c24055d8b80ba053192a2cdb0a2e5f359fe2a5a67ae"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/auto/sdk",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.2.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-96b48f205a269560",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "db21004daa29d7f6b5238a6c9d22e05953cb5b00b392a59a920272ef14c3572d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/google.golang.org\\/grpc\\/otelgrpc:v0.69.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.69.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.69.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-httptrace-otelhttptrace-89abc802bceaafbc",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3027182fb27a56dfd7d248ea6cc6647a40a6c2cbab6d045b2faf6f922c9eda59"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/httptrace\\/otelhttptrace:v0.69.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.69.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.69.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-b7db8637b17ad566",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "f2dbc8083e2f49338eb0daec2382e37fa0bee942afa53107e5763724ca323e8a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.69.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.69.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.69.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-8772c273400c3118",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "263c07987a40e22677c01c65baed9f6db13b8f892a944f235f20323d71fb1ea5"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.44.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.44.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetricgrpc-e7383c54ca1b677d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "494a6579ce5da74eab7aed7369798e5ddbea1f7f7cb5aaab0d7a9497df63c527"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:exporters\\/otlp\\/otlpmetric\\/otlpmetricgrpc:v1.44.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc@v1.44.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.44.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetrichttp-bf4ca7886242ceee",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "46eca71db7d4f09504c3b0f238d824558836495b6ca05dbccb42c622bebd8e00"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:exporters\\/otlp\\/otlpmetric\\/otlpmetrichttp:v1.44.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.44.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.44.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-3c59ab239ae903fc",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e18b15bb707cfb7aad59862bb146209f4386efca4dd2b9cd3d1197e126e89102"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:exporters\\/otlp\\/otlptrace:v1.44.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.44.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracegrpc-8d988bb9c4b028cc",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "a9acc426550e433842a734291444c66f2ec476a8c8d70b1dd16fba1a0d520935"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:exporters\\/otlp\\/otlptrace\\/otlptracegrpc:v1.44.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.44.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracehttp-8a0f605c806c0a80",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "9608773e256b45458c2ce55291089cc73665979363175afe02db17d574481f0d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:exporters\\/otlp\\/otlptrace\\/otlptracehttp:v1.44.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.44.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-a9169c5599314ebc",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "d70d2020b4dc1ddaf7608fa2c4bca37a6c2b567b0c5116d3645ad26027437667"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:metric:v1.44.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/metric",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.44.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-6402372b8497ddbe",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "9c76306fd94af9f24f53f7674fab3b5bb67c8ad316caaae755f6e179562b679f"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:sdk:v1.44.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.44.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/sdk",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.44.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-ec3aea7c957b5623",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "dcb94a808f958db56c8cd445649640277d168d70b956435192ceac8b4f6211f2"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:sdk\\/metric:v1.44.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.44.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/sdk/metric",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.44.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-ff91eefccab322fe",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8f11790ac19809eef8302471d97e20ed6b18fd504a46aaa936f5e55ffea0b489"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:trace:v1.44.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/trace",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.44.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-proto-otlp-f12a32ae085a66c8",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "210456813e6cace0987e25a7a6a518cfd09599b3bc6c598a730631a6e0922f68"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:proto:otlp:v1.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.10.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/proto/otlp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.10.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.uber.org-mock-b11828b798d34b4f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "87217d75f99b8085f911f39d6aca8bb160fac6aa4d6655db94b07f0db9f0bf76"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.uber.org/mock@v0.6.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.uber.org/mock",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.6.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-386469236f2141f7",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "50fe3ebfa7c5ac121bd65f77e1b0e5fff9a69e82191032b489d835f8022f5f95"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:yaml:v4:v4.0.0-rc.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.yaml.in/yaml/v4@v4.0.0-rc.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.yaml.in/yaml/v4",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v4.0.0-rc.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-5a5d2cb9681802ae",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "419e0cba8f131d7e828b3376bcf3dde5f0461f2a20add2bd7c6e302cf154b2da"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go:ssh:v0.53.0:*:*:*:*:go:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.53.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/crypto",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.53.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-87ea47fa8c42d98f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "470f23fe11731af2546703415e702d7f9b150d5b7eeb948ad82ec8c42c59b79a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:networking:v0.56.0:*:*:*:*:go:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/net@v0.56.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/net",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.56.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-3ce95714712299f3",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1cb208e314514ed091931629e0734517426cfce83aab68bef8a5db8348070b03"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.21.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/sync@v0.21.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/sync",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.21.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-01fa308bcecefaf0",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "9e849fd85aba17c0c1812f8bcac224c7bac8131a0d1c9b31380b4fa78aed857c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.46.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/sys@v0.46.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/sys",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.46.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-term-dcaf04417331329b",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "d2b2ef0d10ad363d20664c885e10b239bd8e0331212d5a9ce01fa1aec061ae67"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:x\\/term:v0.44.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/term@v0.44.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/term",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.44.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-d0dcecd82b363179",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "b179b0a3d0f03f738af4467b3ea01d6a8a121a8cdf97fddaebfc4971bccf4611"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:text:v0.38.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/text@v0.38.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/text",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.38.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-time-956926f0a617210a",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "6dbae9f2dddb1947853b1d3ca6fb0c6114c2552324f3dbb8b4a6cd3996e9f3c5"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:x\\/time:v0.15.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/time@v0.15.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/time",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.15.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-68ef03fbd532e916",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "2a39f4374b42ac38220055be9463b8259ddc938e027a1bc940c0308fd405d06f"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260526163538-3dc84a4a5aaa",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "google.golang.org/genproto/googleapis/api",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20260526163538-3dc84a4a5aaa"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-f2f2ebf671de8589",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "9991c774f665d1d6c61c27e566002afd0e3af0359515c536c21841d8a028f1f9"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260526163538-3dc84a4a5aaa",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "google.golang.org/genproto/googleapis/rpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20260526163538-3dc84a4a5aaa"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-e3e0e9431f16fdf6",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "5679c8219f3c53338e28bba4422f88986cfc3b559da7c9c01869ef39f1085904"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:grpc:v1.81.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.81.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "google.golang.org/grpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.81.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-8164490d9e5ade6c",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "7d5e99c21368703c812cad1d8fe7e0f1e92d7157a0041b84a25a5b4d0c813551"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.11:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.11",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "google.golang.org/protobuf",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.36.11"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-gopkg.in-ini.v1-bf4cc9ffe8a221f3",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0e09f1fbafa77c4f887f38d410848d7b274f261f405cd36c59b18ff4acc2b0e0"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/gopkg.in/ini.v1@v1.67.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "gopkg.in/ini.v1",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.67.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-d21146ee3e6c85b9",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "7f1566fc6cc0cc45aa2c7baf72d23dd4a4bd8613669963a85aed174d8252ec20"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "gopkg.in/yaml.v3",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v3.0.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-gotest.tools-v3-592a486592042169",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "ee4a107c829dcbe23c5137adc9c814a975920f0a60bf5f7729afaa46c98163c4"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/gotest.tools/v3@v3.5.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "gotest.tools/v3",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v3.5.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-stdlib-48da999b8862ef9c",
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:go:1.26.4:-:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/stdlib@1.26.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "BSD-3-Clause",
        "name": "stdlib",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "go1.26.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-32f270c0088f37f5",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "467c4d87117524ebba089515a5eb5362fad71ddc70f63f63158819a48f9a9d26"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/tags.cncf.io/container-device-interface@v1.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "tags.cncf.io/container-device-interface",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.0"
      },
      {
        "SPDXID": "SPDXRef-DocumentRoot-Directory-sbom-binary",
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "sbom-binary",
        "primaryPackagePurpose": "FILE",
        "supplier": "NOASSERTION"
      }
    ],
    "relationships": [
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-buildkit-007c7beb363e5507"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-01fa308bcecefaf0"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-0f660c4163034fa7"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-1056dbcaffc95e97"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-signal-138af3cec38da1ad"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-162dcec5b0cf66ac"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-188d6fdd767f23f7"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-buildx-19a3f64b5c20b77c"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-1a3ef9cf5db0acd7"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-go-archive-1c227fa1e082c280"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-fsutil-25a888b46d7d7b99"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-26c491503bea813a"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-kballard-go-shellquote-275621ee6b618ce7"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-29b8dcc07e4549ee"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-2b8a0bd4ecfcb953"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-gofrs-flock-2d70e276aea9769f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-eiannone-keyboard-32bfc563785f3070"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-32f270c0088f37f5"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-386469236f2141f7"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-3b42fb914efadd3c"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-3c59ab239ae903fc"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-3ce95714712299f3"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-morikuni-aec-3e7347929ea8912e"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-3fb3eeebed9132ff"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-symlink-40fd734d126c6d02"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-422b84a5e7bfc513"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-go-csvvalue-4886f1b2e1cb4a83"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-stdlib-48da999b8862ef9c"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-4a2ff4f9ba93781a"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-shlex-4b1a3f0b78b0008a"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-4b2c029492f47a02"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-4ba80031789952e1"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-vt100-4f29b005d3fa30ee"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-4ff6dea5fb056fb0"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-51676ead64b080f4"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-51a72a5620cf8c27"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-56cb2dffd7c30228"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-gotest.tools-v3-592a486592042169"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-599af7dfc5d3389f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-5a5d2cb9681802ae"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-5cae971fdde02b5f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-5cc7b4d97c542146"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-skratchdot-open-golang-5fb0ada67c922302"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-60ca433a9620883b"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-6111def7432cdba2"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-6402372b8497ddbe"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-65b93a3fb8b8ec81"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-capability-665cc7918a78c9d5"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-68ef03fbd532e916"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-locker-6953215242ff3e7f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-6a33c5d05ba2dcf5"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-in-toto-golang-6e5b811ebbc7c5f7"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-6f447696526b0eed"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-7a6229654175e9b1"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-inhies-go-bytesize-7aa68813d6cafdb5"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-7abf377f84f4479d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-buger-goterm-7b0d3f4cd01f9237"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-80769eca377b15b6"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-8164490d9e5ade6c"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-85088c730a1ae449"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-compose-spec-compose-go-v2-85361051481f8b90"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-8772c273400c3118"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-87ea47fa8c42d98f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-88e7c03a0d8b71c4"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-httptrace-otelhttptrace-89abc802bceaafbc"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-89d715d4f4e29706"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracehttp-8a0f605c806c0a80"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-8d1b0aae34326279"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-hashstructure-v2-8d26908079566755"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-attestation-8d3bb677e7eecfe7"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracegrpc-8d988bb9c4b028cc"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-continuity-8e5bc30feaa9b5e9"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-shibumi-go-pathspec-90055b02f805e548"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-9158d403296edbb7"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-DefangLabs-secret-detector-9361503ff538e06e"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-956926f0a617210a"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-96b48f205a269560"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-docs-tool-9aa87edf86a45600"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mgutz-ansi-9e1510d4d71ec116"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-AlecAivazis-survey-v2-a0444b75c34abaaa"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-a479bd01ae9bab6d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-a66fd84d72f77c7e"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-a7133aa652d359d7"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-a9169c5599314ebc"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-ad19f1a6529d0080"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.uber.org-mock-b11828b798d34b4f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-b37ecc307fcde5f7"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-b3c96cf426102e3b"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-b412a2534982091f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-fvbommel-sortorder-b6a4450d68edb79b"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-b7db8637b17ad566"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-b827f66b7043b4b9"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetrichttp-bf4ca7886242ceee"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-gopkg.in-ini.v1-bf4cc9ffe8a221f3"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-c45a1b8801f12ab0"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-go-cc690bef9d6f6bd8"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-cc971d6e9be10705"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-console-ce84a24cb6ed8822"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-d0dcecd82b363179"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-d19d7312ec32e561"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-d21146ee3e6c85b9"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-d3697e5feb943391"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-d3e36f74b8a2d665"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-d902d6e89ed5500a"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tilt-dev-fsnotify-dc778e9578995482"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-dcaf04417331329b"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-dea6adbf0ee99670"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-xhit-go-str2duration-v2-dfb69bb258426a47"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-e2526ff04adbd835"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-e3e0e9431f16fdf6"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-e3e9b16d0dd7b55d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetricgrpc-e7383c54ca1b677d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-e8068adb39ed10cb"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-term-ebd41356d8f6e568"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-ec3aea7c957b5623"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-ed0c8afd6fe291d2"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-eea84a7505cb170b"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-proto-otlp-f12a32ae085a66c8"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-f2f2ebf671de8589"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-units-f828de1fd2c7d7b2"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-f8be78a1057be2eb"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-f9dfe6673966896d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-fc6fb7d31e048eee"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-fe617fa6f8b97ad3"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-ff91eefccab322fe"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-buildkit-007c7beb363e5507"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-01fa308bcecefaf0"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-0f660c4163034fa7"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-1056dbcaffc95e97"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-signal-138af3cec38da1ad"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-162dcec5b0cf66ac"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-188d6fdd767f23f7"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-buildx-19a3f64b5c20b77c"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-1a3ef9cf5db0acd7"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-go-archive-1c227fa1e082c280"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-fsutil-25a888b46d7d7b99"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-26c491503bea813a"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-kballard-go-shellquote-275621ee6b618ce7"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-29b8dcc07e4549ee"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-2b8a0bd4ecfcb953"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-gofrs-flock-2d70e276aea9769f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-eiannone-keyboard-32bfc563785f3070"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-32f270c0088f37f5"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-386469236f2141f7"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-3b42fb914efadd3c"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-3c59ab239ae903fc"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-3ce95714712299f3"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-morikuni-aec-3e7347929ea8912e"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-3fb3eeebed9132ff"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-symlink-40fd734d126c6d02"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-422b84a5e7bfc513"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-go-csvvalue-4886f1b2e1cb4a83"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-stdlib-48da999b8862ef9c"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-4a2ff4f9ba93781a"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-shlex-4b1a3f0b78b0008a"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-4b2c029492f47a02"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-4ba80031789952e1"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-vt100-4f29b005d3fa30ee"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-4ff6dea5fb056fb0"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-51676ead64b080f4"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-51a72a5620cf8c27"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-56cb2dffd7c30228"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-gotest.tools-v3-592a486592042169"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-599af7dfc5d3389f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-5a5d2cb9681802ae"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-5cae971fdde02b5f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-5cc7b4d97c542146"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-skratchdot-open-golang-5fb0ada67c922302"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-60ca433a9620883b"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-6111def7432cdba2"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-6402372b8497ddbe"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-65b93a3fb8b8ec81"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-capability-665cc7918a78c9d5"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-68ef03fbd532e916"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-locker-6953215242ff3e7f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-6a33c5d05ba2dcf5"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-in-toto-golang-6e5b811ebbc7c5f7"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-6f447696526b0eed"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-7a6229654175e9b1"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-inhies-go-bytesize-7aa68813d6cafdb5"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-7abf377f84f4479d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-buger-goterm-7b0d3f4cd01f9237"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-80769eca377b15b6"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-8164490d9e5ade6c"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-85088c730a1ae449"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-compose-spec-compose-go-v2-85361051481f8b90"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-8772c273400c3118"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-87ea47fa8c42d98f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-88e7c03a0d8b71c4"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-httptrace-otelhttptrace-89abc802bceaafbc"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-89d715d4f4e29706"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracehttp-8a0f605c806c0a80"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-8d1b0aae34326279"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-hashstructure-v2-8d26908079566755"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-attestation-8d3bb677e7eecfe7"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracegrpc-8d988bb9c4b028cc"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-continuity-8e5bc30feaa9b5e9"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-shibumi-go-pathspec-90055b02f805e548"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-9158d403296edbb7"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-DefangLabs-secret-detector-9361503ff538e06e"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-956926f0a617210a"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-96b48f205a269560"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-docs-tool-9aa87edf86a45600"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mgutz-ansi-9e1510d4d71ec116"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-AlecAivazis-survey-v2-a0444b75c34abaaa"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-a479bd01ae9bab6d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-a66fd84d72f77c7e"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-a7133aa652d359d7"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-a9169c5599314ebc"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-ad19f1a6529d0080"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.uber.org-mock-b11828b798d34b4f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-b37ecc307fcde5f7"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-b3c96cf426102e3b"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-b412a2534982091f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-fvbommel-sortorder-b6a4450d68edb79b"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-b7db8637b17ad566"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-b827f66b7043b4b9"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetrichttp-bf4ca7886242ceee"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-gopkg.in-ini.v1-bf4cc9ffe8a221f3"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-c45a1b8801f12ab0"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-go-cc690bef9d6f6bd8"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-cc971d6e9be10705"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-console-ce84a24cb6ed8822"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-d0dcecd82b363179"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-d19d7312ec32e561"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-d21146ee3e6c85b9"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-d3697e5feb943391"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-d3e36f74b8a2d665"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-d902d6e89ed5500a"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tilt-dev-fsnotify-dc778e9578995482"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-dcaf04417331329b"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-dea6adbf0ee99670"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-xhit-go-str2duration-v2-dfb69bb258426a47"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-e2526ff04adbd835"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-e3e0e9431f16fdf6"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-e3e9b16d0dd7b55d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetricgrpc-e7383c54ca1b677d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-e8068adb39ed10cb"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-term-ebd41356d8f6e568"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-ec3aea7c957b5623"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-ed0c8afd6fe291d2"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-eea84a7505cb170b"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-proto-otlp-f12a32ae085a66c8"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-f2f2ebf671de8589"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-units-f828de1fd2c7d7b2"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-f8be78a1057be2eb"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-f9dfe6673966896d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-fc6fb7d31e048eee"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-fe617fa6f8b97ad3"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-ff91eefccab322fe"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-AlecAivazis-survey-v2-a0444b75c34abaaa",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-DefangLabs-secret-detector-9361503ff538e06e",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-88e7c03a0d8b71c4",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-buger-goterm-7b0d3f4cd01f9237",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-fe617fa6f8b97ad3",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-b827f66b7043b4b9",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-51676ead64b080f4",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-compose-spec-compose-go-v2-85361051481f8b90",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-console-ce84a24cb6ed8822",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-a479bd01ae9bab6d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-e3e9b16d0dd7b55d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-continuity-8e5bc30feaa9b5e9",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-6a33c5d05ba2dcf5",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-d3697e5feb943391",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-log-4b2c029492f47a02",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-platforms-d19d7312ec32e561",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-c45a1b8801f12ab0",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-d3e36f74b8a2d665",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-distribution-reference-60ca433a9620883b",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-buildx-19a3f64b5c20b77c",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-cli-4ba80031789952e1",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-cli-docs-tool-9aa87edf86a45600",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-026e5121c3f450a9",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-6f447696526b0eed",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-e8068adb39ed10cb",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-connections-d902d6e89ed5500a",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-units-eea84a7505cb170b",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-eiannone-keyboard-32bfc563785f3070",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-3fb3eeebed9132ff",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fvbommel-sortorder-b6a4450d68edb79b",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-1056dbcaffc95e97",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-0f660c4163034fa7",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-fc6fb7d31e048eee",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gofrs-flock-2d70e276aea9769f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-5cae971fdde02b5f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-cmp-26c491503bea813a",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-shlex-4b1a3f0b78b0008a",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-1a3ef9cf5db0acd7",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-dea6adbf0ee99670",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-e2526ff04adbd835",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-7abf377f84f4479d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-9158d403296edbb7",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-188d6fdd767f23f7",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-in-toto-attestation-8d3bb677e7eecfe7",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-in-toto-in-toto-golang-6e5b811ebbc7c5f7",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-inhies-go-bytesize-7aa68813d6cafdb5",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-7a6229654175e9b1",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kballard-go-shellquote-275621ee6b618ce7",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-compress-a7133aa652d359d7",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-ed0c8afd6fe291d2",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-6111def7432cdba2",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-162dcec5b0cf66ac",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-29b8dcc07e4549ee",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mgutz-ansi-9e1510d4d71ec116",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-hashstructure-v2-8d26908079566755",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-buildkit-007c7beb363e5507",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-599af7dfc5d3389f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-go-archive-1c227fa1e082c280",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-locker-6953215242ff3e7f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-api-65b93a3fb8b8ec81",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-client-f8be78a1057be2eb",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-a66fd84d72f77c7e",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-80769eca377b15b6",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-capability-665cc7918a78c9d5",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-2b8a0bd4ecfcb953",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-signal-138af3cec38da1ad",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-symlink-40fd734d126c6d02",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-user-3b42fb914efadd3c",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-userns-4ff6dea5fb056fb0",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-term-ebd41356d8f6e568",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-morikuni-aec-3e7347929ea8912e",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-b412a2534982091f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-56cb2dffd7c30228",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-cc971d6e9be10705",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-errors-85088c730a1ae449",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-f9dfe6673966896d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-422b84a5e7bfc513",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-4a2ff4f9ba93781a",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-shibumi-go-pathspec-90055b02f805e548",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-5cc7b4d97c542146",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-go-cc690bef9d6f6bd8",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-ad19f1a6529d0080",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-skratchdot-open-golang-5fb0ada67c922302",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cobra-b3c96cf426102e3b",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-8d1b0aae34326279",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tilt-dev-fsnotify-dc778e9578995482",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-89d715d4f4e29706",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-fsutil-25a888b46d7d7b99",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-go-csvvalue-4886f1b2e1cb4a83",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-units-f828de1fd2c7d7b2",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-vt100-4f29b005d3fa30ee",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xhit-go-str2duration-v2-dfb69bb258426a47",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-b37ecc307fcde5f7",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-51a72a5620cf8c27",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-96b48f205a269560",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-httptrace-otelhttptrace-89abc802bceaafbc",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-b7db8637b17ad566",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-8772c273400c3118",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetricgrpc-e7383c54ca1b677d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetrichttp-bf4ca7886242ceee",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-3c59ab239ae903fc",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracegrpc-8d988bb9c4b028cc",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracehttp-8a0f605c806c0a80",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-a9169c5599314ebc",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-6402372b8497ddbe",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-ec3aea7c957b5623",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-ff91eefccab322fe",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-proto-otlp-f12a32ae085a66c8",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.uber.org-mock-b11828b798d34b4f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-386469236f2141f7",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-5a5d2cb9681802ae",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-87ea47fa8c42d98f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-3ce95714712299f3",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-01fa308bcecefaf0",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-term-dcaf04417331329b",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-d0dcecd82b363179",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-time-956926f0a617210a",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-68ef03fbd532e916",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-f2f2ebf671de8589",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-e3e0e9431f16fdf6",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-8164490d9e5ade6c",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-ini.v1-bf4cc9ffe8a221f3",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-d21146ee3e6c85b9",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-gotest.tools-v3-592a486592042169",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-stdlib-48da999b8862ef9c",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-32f270c0088f37f5",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-sbom-binary",
        "relationshipType": "DESCRIBES",
        "spdxElementId": "SPDXRef-DOCUMENT"
      }
    ],
    "spdxVersion": "SPDX-2.3"
  }
}