{
  "_type": "https://in-toto.io/Statement/v0.1",
  "predicateType": "https://spdx.dev/Document",
  "subject": [
    {
      "name": "docker-compose-linux-riscv64",
      "digest": {
        "sha256": "9aa503f95e94381ffbc34a26a7dd31dca4e96ba795daa1ed26735572400a17ce"
      }
    }
  ],
  "predicate": {
    "SPDXID": "SPDXRef-DOCUMENT",
    "creationInfo": {
      "created": "2026-06-23T14:23:36Z",
      "creators": [
        "Organization: Anchore, Inc",
        "Tool: syft-v1.40.0"
      ],
      "licenseListVersion": "3.27"
    },
    "dataLicense": "CC0-1.0",
    "documentNamespace": "https://anchore.com/syft/dir/sbom-binary-09ece3aa-0406-4550-8d8e-cee77d9283da",
    "files": [
      {
        "SPDXID": "SPDXRef-File-docker-compose-692def66df504244",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "9aa503f95e94381ffbc34a26a7dd31dca4e96ba795daa1ed26735572400a17ce"
          }
        ],
        "copyrightText": "NOASSERTION",
        "fileName": "docker-compose",
        "fileTypes": [
          "APPLICATION",
          "BINARY"
        ],
        "licenseConcluded": "NOASSERTION",
        "licenseInfoInFiles": [
          "NOASSERTION"
        ]
      }
    ],
    "name": "sbom-binary",
    "packages": [
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-AlecAivazis-survey-v2-a136c8a6dc9349e0",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e88feef05bf2b5d1ac8289eb62c567dadf2de108919e1e90493aa49212224a34"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:AlecAivazis:survey\\/v2:v2.3.7:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/AlecAivazis/survey/v2@v2.3.7",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/AlecAivazis/survey/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.3.7"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-DefangLabs-secret-detector-d241272003b93dee",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "adde1b3af2a60c8c7459e4eff50cfe86086c8328e290588faec7971e529ea4ed"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:DefangLabs:secret-detector:v0.0.0-20250403165618-22662109213e:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:DefangLabs:secret_detector:v0.0.0-20250403165618-22662109213e:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/DefangLabs/secret-detector@v0.0.0-20250403165618-22662109213e",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/DefangLabs/secret-detector",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20250403165618-22662109213e"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-cd601fb4ce7cc95d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "962719245c36470a4732a78a4c26248adb0fa873714e677848d479afde0518cf"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:acarl005:stripansi:v0.0.0-20180116102854-5a71ef0e047d:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/acarl005/stripansi@v0.0.0-20180116102854-5a71ef0e047d",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/acarl005/stripansi",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20180116102854-5a71ef0e047d"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-buger-goterm-806fcac9dda6076d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "67d62f1a63a287cd4fd056d5b44613145e98b1283149428485ffdff5b4cc5db6"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:buger:goterm:v1.0.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/buger/goterm@v1.0.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/buger/goterm",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-a0b120bdc0460a3b",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "64df8831aef9dca7d7e6177cbd568c8b18e7a91677cbc0ae24a44a8f5c5cb123"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:cenkalti:backoff\\/v5:v5.0.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/cenkalti/backoff/v5",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v5.0.3"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-f500d753b791be37",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "50bf35e7153d4aab059626f3ba08338d786883b6cbea85fd05b3599cbd9416fb"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:cespare:xxhash\\/v2:v2.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/cespare/xxhash/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.3.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-78248b8f86bb2eb5",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0a1c082a740dde4719b5e4d73206f5c33b5281a53e65e9a481676887082cf2d6"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:clipperhouse:uax29\\/v2:v2.2.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/clipperhouse/uax29/v2@v2.2.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/clipperhouse/uax29/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.2.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-compose-spec-compose-go-v2-713b5700ef11b5f6",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "fb10593717204aeb386ad409c173c47611d18021326668ff06ea8de66df73aed"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose-spec:compose-go\\/v2:v2.12.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose-spec:compose_go\\/v2:v2.12.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose_spec:compose-go\\/v2:v2.12.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose_spec:compose_go\\/v2:v2.12.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose:compose-go\\/v2:v2.12.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:compose:compose_go\\/v2:v2.12.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/compose-spec/compose-go/v2@v2.12.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/compose-spec/compose-go/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.12.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-console-b1157561477bbe6b",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "474ca635ec9d46a1f60e66a414d7668d1da4d2ded43ee88e57f37fdbbfeaaac7"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:console:v1.0.5:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/console@v1.0.5",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/console",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.5"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-642f764ee4370b49",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e67d281d8541c0de158685fd7c5ca4095f5d175fc1bc05de83617c5ba518ab5a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:containerd\\/api:v1.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/containerd/api@v1.10.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/containerd/api",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.10.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-35e91a433b51488f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "293173074d8bbe262699f466cfcafd50577e9fa62575d5452bee656e04175135"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:containerd\\/v2:v2.2.5:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/containerd/v2@v2.2.5",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/containerd/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.2.5"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-continuity-85a589aa8d0b6c90",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "edaf391d9a424acfb5669b3411edc33d2b80598fb448933524d339d679445438"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:continuity:v0.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/continuity@v0.5.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/continuity",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.5.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-a177e8f5dbf5c430",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "b60e7221f225408af162dbbd6a3a98e365b79694b5f57a9dc5141e130606f0f2"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:errdefs:v1.0.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/errdefs@v1.0.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/errdefs",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-a7267222137f064e",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "f48289d3a16fc8d95ec56ebdd035ee40dc76280d9c5095f1d79d57771dd93cf1"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:errdefs\\/pkg:v0.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/errdefs/pkg",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.3.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-log-4921d7d97790eb03",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "4c226dee2a0cd9caffb5f47c18f6c67fdfd54405fc0f60783e3cc2a5f5f9e342"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:log:v0.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/log@v0.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/log",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-platforms-3cd684df17853756",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "338d89ad44f8cdf653aad914c24af41b399459b7f23b954ed10e5bde8a7ded3e"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:platforms:v1.0.0-rc.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/platforms",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.0-rc.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-2069f1951703de31",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c5b56ee83e2a1768e285d87dac354e2aa50c88505093a61cb53768d73934f3b6"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:ttrpc:v1.2.8:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/ttrpc@v1.2.8",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/ttrpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.2.8"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-b334a1069009b796",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1d91cf8515a8e57332dd0190a0fad4cdb5bfd9c9308dfc1e1e63b096422b3c04"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:containerd:typeurl\\/v2:v2.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/containerd/typeurl/v2@v2.3.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/containerd/typeurl/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.3.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-distribution-reference-61fa07e9da1c949b",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "d085c2439838fd03071e46ab63387997ebbc4f7b7bdf333942f7eb0f2220c419"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:distribution:reference:v0.6.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/distribution/reference@v0.6.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/distribution/reference",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.6.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-buildx-09fd9f9f78654577",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e6bfd97000b4b36a19d573891ef60561b8f8e08e2bc51b0875fb1105e5c2964b"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:buildx:v0.35.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/buildx@v0.35.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/buildx",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.35.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-cli-e461205794731844",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "9f0f618a6c4c319ede21e85eac9365290abe69c9e5cc680777ee2e7f5d104527"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:cli:v29.6.0\\+incompatible:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/cli@v29.6.0%2Bincompatible",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/cli",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v29.6.0+incompatible"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-cli-docs-tool-964d356226311d92",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "eddf1001115bed01286e2ceac6610cedf3ad799107c07ff35a01d0b4764471f1"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:cli-docs-tool:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:cli_docs_tool:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/cli-docs-tool@v0.11.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/cli-docs-tool",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.11.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:compose\\/v5:v5.2.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/compose/v5@v5.2.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/compose/v5",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v5.2.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-fbc3f534c67c7ed5",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0c15f4634cc08d96d2ae6d6ecce91daf5a2756084a69fb639525ade0015ec733"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:docker:v28.5.2\\+incompatible:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/docker@v28.5.2%2Bincompatible",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/docker",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v28.5.2+incompatible"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-5afbe3cf971dc0ef",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "6c844444e6fb4a8e8f465aba293b5d4bd30f1230b6f4e411905365bcad8e5fc4"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:docker-credential-helpers:v0.9.8:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:docker_credential_helpers:v0.9.8:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/docker-credential-helpers@v0.9.8",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/docker-credential-helpers",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.9.8"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-connections-f9c1ede60117c5da",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e92b117c975d3f6d9632b0a48f5f71f562a31034c1f9a86c7621987f498ddfd7"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:go-connections:v0.7.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:go_connections:v0.7.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/go-connections@v0.7.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/go-connections",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.7.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-docker-go-units-d2f06e141f01fa90",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "ebdaf15dc064dbb4af49a6b14ed2e1ffc9657070fcbd81d3ed649d459fe3bebe"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:go-units:v0.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:docker:go_units:v0.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/docker/go-units@v0.5.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/docker/go-units",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.5.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-eiannone-keyboard-acacf8b87e48bfb6",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "5c10477086f6e7a81426d2e6636da7f7d1da653cfeaf6679d7150f8b4d66df08"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:eiannone:keyboard:v0.0.0-20220611211555-0d226195f203:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/eiannone/keyboard@v0.0.0-20220611211555-0d226195f203",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/eiannone/keyboard",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20220611211555-0d226195f203"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-1f0eb4668df97056",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3454d5d998f56cbe2673db2a5800976d01550418365b718fbeaa7cfc4492d968"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:felixge:httpsnoop:v1.0.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/felixge/httpsnoop",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-fvbommel-sortorder-72be54710fed3aed",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "7d49a87be1cbb014dcb410e8681c29428e4dfa7ac2a7c83f06329bffa650998c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:fvbommel:sortorder:v1.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/fvbommel/sortorder@v1.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/fvbommel/sortorder",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-logr-1f0bd20aee5c7f88",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0a39c3947abc8a47fa138f76aba78a6e818e0b44fc08368ebe41c2220f227442"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go-logr:logr:v1.4.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go_logr:logr:v1.4.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go:logr:v1.4.3:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.3",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/go-logr/logr",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.4.3"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-go-logr-stdr-88f6e3be9206356b",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8525b11e8a93816d92daa19cd0b4c0239eb7299e582984614f730529931b8da8"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go-logr:stdr:v1.2.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go_logr:stdr:v1.2.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go:stdr:v1.2.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/go-logr/stdr",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.2.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-3aa0247ba2d57e0c",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "bcce48268500cb777bcd1495b48c108018fb0625ad30f7e63c48005e7be3d51a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go-viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go_viper:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go:mapstructure\\/v2:v2.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/go-viper/mapstructure/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.5.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-gofrs-flock-d005d53b7a338f92",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "f792689583af18ca9e1f7d7e142ec3dbeb942dfea61bad66119fc0f1d458333c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:gofrs:flock:v0.13.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/gofrs/flock@v0.13.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/gofrs/flock",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.13.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-d6740afea85f6584",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "9187fcd434d615eeedfb556f2fb792fa32855566949caf5c075a9bc27eb76026"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang-jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang_jwt:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:jwt\\/v5:v5.3.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/golang-jwt/jwt/v5",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v5.3.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-google-go-cmp-307632f45607a734",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c24f37f36113b2fe0961467022c9fa6296225a206c60b489893b320726d5b8df"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:go-cmp:v0.7.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:go_cmp:v0.7.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/google/go-cmp@v0.7.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/google/go-cmp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.7.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-google-shlex-0a9ce5b8ff532fff",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "125e8ce244d308e87a68188a694186ee861348f3fc331a8be182379192b070fe"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:shlex:v0.0.0-20191202100458-e7afc7fbc510:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/google/shlex@v0.0.0-20191202100458-e7afc7fbc510",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/google/shlex",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20191202100458-e7afc7fbc510"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-google-uuid-d38672ac678914b7",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "348bda24330eb231c0f27d630212d2833ac0cf2d4782bfa136b6f9edefbde05d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:uuid:v1.6.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/google/uuid",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.6.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-074ce91a3fab4981",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e558a99ef1296eaaf6800d956ccfa76156e4205dbc7396507ea081439836c5f9"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc-ecosystem:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc-ecosystem:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc_ecosystem:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc_ecosystem:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc:grpc-gateway\\/v2:v2.29.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:grpc:grpc_gateway\\/v2:v2.29.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.29.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-2719210a0dcc7ef1",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3b1ace7a1ef91145cc63c4c18da8367f35c6678d0b07a20ac38e587865036362"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:errwrap:v1.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/hashicorp/errwrap",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-31a86409f49174ef",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "d37e452982168e650bc8544128fb3c4c14288b4c7a77d1b8c5cf677972560194"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go-cleanhttp:v0.5.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go_cleanhttp:v0.5.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/hashicorp/go-cleanhttp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.5.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-a496ac7c93d969fb",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1f90e412d7fa097745a74374126e540b04295cc5a47bc200d3e943e3c6b0318a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go-multierror:v1.1.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go_multierror:v1.1.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/hashicorp/go-multierror",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-f946f9b4b13dce22",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "09e388cfa93e2e8377a97f59d2dc90acfb620750c56113df08806d6973d20a70"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go-version:v1.9.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:hashicorp:go_version:v1.9.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/hashicorp/go-version@v1.9.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/hashicorp/go-version",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.9.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-in-toto-attestation-57399d626404c58e",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "68f4546776b36ea0fbc84043e5f3f74c3f03b337fe607a36f3848e7296a18d09"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in-toto:attestation:v1.2.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in_toto:attestation:v1.2.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in:attestation:v1.2.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/in-toto/attestation@v1.2.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/in-toto/attestation",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.2.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-in-toto-in-toto-golang-a615f62756b760b8",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "9df89d318045c7e134967997e4a5273763dd9bccdd34a6a5d5aca326ecf34680"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in-toto:in-toto-golang:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in-toto:in_toto_golang:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in_toto:in-toto-golang:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in_toto:in_toto_golang:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in:in-toto-golang:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:in:in_toto_golang:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/in-toto/in-toto-golang@v0.11.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/in-toto/in-toto-golang",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.11.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-inhies-go-bytesize-5af5ce86551eda22",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "16d123f2c7c871a6817c02ab1350b06fad580ed62af49c4284ad5cec029c7bbb"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:inhies:go-bytesize:v0.0.0-20220417184213-4913239db9cf:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:inhies:go_bytesize:v0.0.0-20220417184213-4913239db9cf:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/inhies/go-bytesize@v0.0.0-20220417184213-4913239db9cf",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/inhies/go-bytesize",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20220417184213-4913239db9cf"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-045f76df0297a244",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1f287d03cbb9d64a6d76447e72a4694f511e6c1c139f5a0af587c661b745cfa2"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:jonboulle:clockwork:v0.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/jonboulle/clockwork@v0.5.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/jonboulle/clockwork",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.5.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-kballard-go-shellquote-884ecbab8ababe44",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "67d9f61453545ecb217f024c060340d1153afe2ed655a01e82fdcfb6e2073ccb"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:kballard:go-shellquote:v0.0.0-20180428030007-95032a82bc51:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:kballard:go_shellquote:v0.0.0-20180428030007-95032a82bc51:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/kballard/go-shellquote@v0.0.0-20180428030007-95032a82bc51",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/kballard/go-shellquote",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20180428030007-95032a82bc51"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-klauspost-compress-1615f841949d9495",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "da3ba92e5030166f79f980d1f8dc03d8c11f14ef5de33e0fae39755d70e3b9aa"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:klauspost:compress:v1.18.6:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/klauspost/compress@v1.18.6",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/klauspost/compress",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.18.6"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-2bf6e12b22788fe6",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "f40f4b1d2a85ffb7725555fa83453d7309bda46de43fd812cdcb883c73ec6881"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go-colorable:v0.1.14:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go_colorable:v0.1.14:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mattn/go-colorable@v0.1.14",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mattn/go-colorable",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.1.14"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-917808a426bb0e36",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "c5f0f4883b842a70e4974deae258a607ebc7f86c4b12d2ff8dbe315494965846"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go-isatty:v0.0.20:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go_isatty:v0.0.20:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mattn/go-isatty@v0.0.20",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mattn/go-isatty",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.20"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-fddabd8048cb5bc0",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "ef2900d13d2390fa734af312e62f6ea0d9f65f2dd1dfcddff470f1dd1c9b59cc"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go-runewidth:v0.0.23:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go_runewidth:v0.0.23:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mattn/go-runewidth@v0.0.23",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mattn/go-runewidth",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.23"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-27567a67f222b944",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0c2d0e304a468e6e8b7cd154e1c91872f6d02b2a76bc4f1ab721465cdb4371fe"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go-shellwords:v1.0.13:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mattn:go_shellwords:v1.0.13:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mattn/go-shellwords@v1.0.13",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mattn/go-shellwords",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.13"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mgutz-ansi-51516f3a292b8186",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8fbfb51e90054b5cf2e7e438ab1d5f5a1f748132b088de10086a18f535b2c8ee"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mgutz:ansi:v0.0.0-20170206155736-9520e82c474b:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mgutz/ansi@v0.0.0-20170206155736-9520e82c474b",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mgutz/ansi",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20170206155736-9520e82c474b"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-mitchellh-hashstructure-v2-238bece83dee4795",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "bc6296974609a9437113c77e87c7fa3492dc089ae06e10b835c0f8e8a6af0dde"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:mitchellh:hashstructure\\/v2:v2.0.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/mitchellh/hashstructure/v2@v2.0.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/mitchellh/hashstructure/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.0.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-buildkit-7becad3ca4a80d9d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "84c5006d01a08edcc90c3399ea8ecc424e570599014f2ccb584be78e0b871d02"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:buildkit:v0.31.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/buildkit@v0.31.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/buildkit",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.31.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-a8480e07f203f0cd",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8cc29f7f7c3a3e06df49aebd19f360fb337f5cb85f5c91a7131dcd97612c14fd"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:docker-image-spec:v1.3.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:docker_image_spec:v1.3.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/docker-image-spec",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.3.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-go-archive-38d9949a3230e1b4",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "ce0e500d43369a2d0920cf5f7506560bb53cfb665f8b17d36281cbeeb59470ff"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:go-archive:v0.2.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:go_archive:v0.2.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/go-archive@v0.2.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/go-archive",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.2.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-locker-a79f7ed3dac8529e",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "7ce5ea478d737af7a0e1f14e0e2c7ed428789a3fe04f4344d5725ba7f7a9b818"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:locker:v1.0.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/locker@v1.0.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/locker",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-api-c9106ddc7a598dc1",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "dbfb1ec6f432a88592f2945208575d05fa56daa13bbd1ec508bfaf37ca71c0c7"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:moby\\/api:v1.55.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/moby/api@v1.55.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/moby/api",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.55.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-moby-client-85ae375705cdd8d1",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e578723e4d9fb8e59fe9195215adcc9082200d9905db9c53a175bc43f047edc7"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:moby\\/client:v0.5.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/moby/client@v0.5.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/moby/client",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.5.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-45b2bfab71fe9981",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "aa586d69f9abea480c2098ca24c0e6316abb58b90a228db786cae9477c74f385"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:patternmatcher:v0.6.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/patternmatcher@v0.6.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/patternmatcher",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.6.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-cebb4319df9ef709",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "930e43fc4aa4070b01162d2cb3dbf5546df0224561cc6bcb92527ec37035e12c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/atomicwriter:v0.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/atomicwriter@v0.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/atomicwriter",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-capability-610547fbbc828459",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e03e2623a2a536d58c08cd59fcad22ed15751645fe0c10c72952690a7759a079"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/capability:v0.4.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/capability@v0.4.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/capability",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.4.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-878422ba1af55bc8",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "01240d18d44e252b8e3ba2cbe9b3c76cabee66ee8d53c3f895d3d6937d738fff"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/sequential:v0.7.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/sequential@v0.7.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/sequential",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.7.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-signal-80c5264650501308",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3eb43176fc5c1a28dda3a5175e8fe553f4ef1d45b23e18fb50ea52a3cb6ebe4d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/signal:v0.7.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/signal@v0.7.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/signal",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.7.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-symlink-f38ba48230504ed1",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1995fcf66119f6ee777fdee7a41cb845cdef24a8fb2410e3fcf376236d86acd5"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/symlink:v0.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/symlink@v0.3.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/symlink",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.3.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-user-abaedddb764d7be2",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8e170c2a2b7b480f34862be614971b075bea9b0fffc14eb565dba2d9e417b8cb"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/user:v0.4.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/user@v0.4.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/user",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.4.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-sys-userns-623e9da4a43f01b6",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "b552d79053b156ef40eb8ff2879f6c94756ff5a84ef5421ebf8259bac38b1bf8"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:sys\\/userns:v0.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/sys/userns@v0.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/sys/userns",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-moby-term-e5f6fa6c4de2cf8d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "eaa9371490050ecea2feadd6fe943ded25f5f76a8a7d98068c242a7c22648334"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:moby:term:v0.5.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/moby/term@v0.5.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/moby/term",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.5.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-morikuni-aec-e017d500770cf432",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "bc1065d29527be2fc97bbd5db11ae1301b6b788a8d31812b4806c479bf23ad74"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:morikuni:aec:v1.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/morikuni/aec@v1.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/morikuni/aec",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-87180d1795474177",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "6a93945ace755b93e586ec86cb3f4509e78120e50303fea75bc3a2ff23a18795"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:opencontainers:go-digest:v1.0.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:opencontainers:go_digest:v1.0.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/opencontainers/go-digest",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-cf50af344cc732e4",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "cb47d49457c86613c5d56e77ed738b834fdf731eb3707089c28a02db1240d38d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:opencontainers:image-spec:v1.1.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:opencontainers:image_spec:v1.1.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/opencontainers/image-spec",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-b2b6c3b8bf74bade",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "31812fbc69d08de364445d6a52e1a894db4d1314c3c1cb79d72a7ba253edac47"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:pelletier:go-toml\\/v2:v2.3.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:pelletier:go_toml\\/v2:v2.3.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/pelletier/go-toml/v2@v2.3.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/pelletier/go-toml/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.3.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-pkg-errors-2b2dcd09df0a5fa8",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "14404bc75cd2db5e28c298f2eeab017a2c5b51192e850030acae54c0b193c2de"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:pkg:errors:v0.9.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/pkg/errors@v0.9.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/pkg/errors",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.9.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-ba77eb2e1842053c",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "18508a826a74b5e714274b09bafe29cd80aa4bdf911929f9d8cdc55303ecfaea"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:planetscale:vtprotobuf:v0.6.1-0.20240319094008-0393e58bdf10:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/planetscale/vtprotobuf",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.6.1-0.20240319094008-0393e58bdf10"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-86d3ee7598326660",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3ca2bd0f21f189fe0b668fae41281736ab348e3e7ec59c307ca1e0a61da5c41c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:santhosh-tekuri:jsonschema\\/v6:v6.0.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:santhosh_tekuri:jsonschema\\/v6:v6.0.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:santhosh:jsonschema\\/v6:v6.0.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/santhosh-tekuri/jsonschema/v6@v6.0.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/santhosh-tekuri/jsonschema/v6",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v6.0.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-6fd7ed28366b6e00",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8ae091f6470c143e10bab74aac6bcf2e82992eff58bf03d856bd38ef705db45b"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure-systems-lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure-systems-lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure_systems_lab:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure_systems_lab:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure-systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure-systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure_systems:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure_systems:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure:go-securesystemslib:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:secure:go_securesystemslib:v0.11.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/secure-systems-lab/go-securesystemslib@v0.11.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/secure-systems-lab/go-securesystemslib",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.11.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-shibumi-go-pathspec-0bf3e74b0354511a",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "414c8c661168d0c77907ccd5f31dad7aca216dbe647dba538bdac19ca8797642"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:shibumi:go-pathspec:v1.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:shibumi:go_pathspec:v1.3.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/shibumi/go-pathspec@v1.3.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/shibumi/go-pathspec",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.3.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-8a1320cb4c8866ca",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "d4c824c6f930e005cc7c83f50ce8dcea4c341a452003ca46569bde37f11f3aae"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:sigstore:sigstore:v1.10.8:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/sigstore/sigstore@v1.10.8",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/sigstore/sigstore",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.10.8"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-go-75572ecccdc128ae",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "6163ffac36c168406fb5b923eb1b70b128f7f190851214d555a74d3978d57b70"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:sigstore:sigstore-go:v1.2.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:sigstore:sigstore_go:v1.2.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/sigstore/sigstore-go@v1.2.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/sigstore/sigstore-go",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.2.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-c59e3552352a6190",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "4ec644ee5d75cc508b66767eb5e1f8526a2ae4184421f2337d10d9d54cea976c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:sirupsen:logrus:v1.9.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/sirupsen/logrus@v1.9.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/sirupsen/logrus",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.9.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-skratchdot-open-golang-0cc62253ba91c587",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "24802eab71047fd7206d4e80b463cae024c6dd97fa08a30da9fd0c1d38200140"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:skratchdot:open-golang:v0.0.0-20200116055534-eef842397966:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:skratchdot:open_golang:v0.0.0-20200116055534-eef842397966:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/skratchdot/open-golang@v0.0.0-20200116055534-eef842397966",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/skratchdot/open-golang",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20200116055534-eef842397966"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-cobra-0d3da0565de6af21",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0cc4d3a27c799bae4873418ea11636735e9609b1f138ec3ac717b3b8b681a5c5"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:spf13:cobra:v1.10.2:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/spf13/cobra",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.10.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-spf13-pflag-180857c9391f515d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e04061d8a01807068e363e9bd987b51a21dfc23ab244ea05e11c183bebcfc059"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:spf13:pflag:v1.0.10:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/spf13/pflag",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.0.10"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tilt-dev-fsnotify-c781ec222e5e817d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "401e78049c00eb1f1053d9c7637c49499476917f5b82965e91128690b4e61170"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tilt-dev:fsnotify:v1.4.8-0.20220602155310-fff9c274a375:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tilt_dev:fsnotify:v1.4.8-0.20220602155310-fff9c274a375:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tilt:fsnotify:v1.4.8-0.20220602155310-fff9c274a375:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tilt-dev/fsnotify@v1.4.8-0.20220602155310-fff9c274a375",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tilt-dev/fsnotify",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.4.8-0.20220602155310-fff9c274a375"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-575fcd72c7e5149c",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "af4a7b7cae7a97c58f7aab8e691de2f4b06a7cfb447572106d44f34f9e62a93e"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:dchapes-mode:v0.0.0-20250318174251-73d941a28323:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:dchapes_mode:v0.0.0-20250318174251-73d941a28323:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tonistiigi/dchapes-mode@v0.0.0-20250318174251-73d941a28323",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tonistiigi/dchapes-mode",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20250318174251-73d941a28323"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-fsutil-f12c5d595c9b9d1d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "b4992ffde747c3d15756d6c7c5ce9ca6a0edb6208b37386a2355b8d1f727c486"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:fsutil:v0.0.0-20260609091201-0257b3308df4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tonistiigi/fsutil@v0.0.0-20260609091201-0257b3308df4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tonistiigi/fsutil",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20260609091201-0257b3308df4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-go-csvvalue-a9730c988e0f4555",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "d9fdf4e01d742da65d07c9245446a85ef00c55a9f6b65f4088ae06d2876342d1"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:go-csvvalue:v0.0.0-20240814133006-030d3b2625d0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:go_csvvalue:v0.0.0-20240814133006-030d3b2625d0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tonistiigi/go-csvvalue@v0.0.0-20240814133006-030d3b2625d0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tonistiigi/go-csvvalue",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20240814133006-030d3b2625d0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-units-4e7823ecca2b2027",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "4978532c4ea96fa7a577fbff7029dd2b400ca6dd7089515bfd8626a81dff406d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:units:v0.0.0-20180711220420-6950e57a87ea:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tonistiigi/units@v0.0.0-20180711220420-6950e57a87ea",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tonistiigi/units",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20180711220420-6950e57a87ea"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-tonistiigi-vt100-eaf60ea50c6bda09",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1fa689d32290d20178f506f6cf9848d541f1490b7824ccb179b151d792a7029c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:tonistiigi:vt100:v0.0.0-20240514184818-90bafcd6abab:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/tonistiigi/vt100@v0.0.0-20240514184818-90bafcd6abab",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/tonistiigi/vt100",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20240514184818-90bafcd6abab"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-xhit-go-str2duration-v2-ff011e6d673e6e57",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "971925734d83ae1eb29ea5fe0dd3f2a79a4228b510a514fc6e9f1876ed81b2d7"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:xhit:go-str2duration\\/v2:v2.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:xhit:go_str2duration\\/v2:v2.1.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/xhit/go-str2duration/v2@v2.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/xhit/go-str2duration/v2",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v2.1.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-a07d8262904d8ae1",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8a5415d61cf38aef8b2ccdf3513274b6b473b5fc208ea2a705636d49191b9b03"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:youmark:pkcs8:v0.0.0-20240726163527-a2c0da244d78:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/github.com/youmark/pkcs8@v0.0.0-20240726163527-a2c0da244d78",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "github.com/youmark/pkcs8",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20240726163527-a2c0da244d78"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-fa40e2f8b782c371",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8d7b272782e69ea775d64c24055d8b80ba053192a2cdb0a2e5f359fe2a5a67ae"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:auto:sdk:v1.2.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/auto/sdk",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.2.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-a5ca3e24de481269",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "db21004daa29d7f6b5238a6c9d22e05953cb5b00b392a59a920272ef14c3572d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/google.golang.org\\/grpc\\/otelgrpc:v0.69.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.69.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.69.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-httptrace-otelhttptrace-d14557625cfa05e3",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "3027182fb27a56dfd7d248ea6cc6647a40a6c2cbab6d045b2faf6f922c9eda59"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/httptrace\\/otelhttptrace:v0.69.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.69.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.69.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-1e535971a63faa51",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "f2dbc8083e2f49338eb0daec2382e37fa0bee942afa53107e5763724ca323e8a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:contrib:instrumentation\\/net\\/http\\/otelhttp:v0.69.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.69.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.69.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-119e2856a308c998",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "263c07987a40e22677c01c65baed9f6db13b8f892a944f235f20323d71fb1ea5"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.44.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.44.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetricgrpc-b6a2832030495227",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "494a6579ce5da74eab7aed7369798e5ddbea1f7f7cb5aaab0d7a9497df63c527"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:exporters\\/otlp\\/otlpmetric\\/otlpmetricgrpc:v1.44.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc@v1.44.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.44.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetrichttp-aeed69416daf60e1",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "46eca71db7d4f09504c3b0f238d824558836495b6ca05dbccb42c622bebd8e00"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:exporters\\/otlp\\/otlpmetric\\/otlpmetrichttp:v1.44.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@v1.44.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.44.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-fb747c292d48740f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "e18b15bb707cfb7aad59862bb146209f4386efca4dd2b9cd3d1197e126e89102"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:exporters\\/otlp\\/otlptrace:v1.44.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.44.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracegrpc-7d85536aa8429cef",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "a9acc426550e433842a734291444c66f2ec476a8c8d70b1dd16fba1a0d520935"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:exporters\\/otlp\\/otlptrace\\/otlptracegrpc:v1.44.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.44.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracehttp-f54054a8ce1f67a0",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "9608773e256b45458c2ce55291089cc73665979363175afe02db17d574481f0d"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:exporters\\/otlp\\/otlptrace\\/otlptracehttp:v1.44.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.44.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-602c8383c8b3069e",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "d70d2020b4dc1ddaf7608fa2c4bca37a6c2b567b0c5116d3645ad26027437667"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:metric:v1.44.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/metric",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.44.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-7d3176f1aca9d6c1",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "9c76306fd94af9f24f53f7674fab3b5bb67c8ad316caaae755f6e179562b679f"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:sdk:v1.44.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.44.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/sdk",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.44.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-4ad8f1f187d59ef2",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "dcb94a808f958db56c8cd445649640277d168d70b956435192ceac8b4f6211f2"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:sdk\\/metric:v1.44.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.44.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/sdk/metric",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.44.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-76da4570c18806fb",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "8f11790ac19809eef8302471d97e20ed6b18fd504a46aaa936f5e55ffea0b489"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:otel:trace:v1.44.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/otel/trace",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.44.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.opentelemetry.io-proto-otlp-8ab3cf70417bfde2",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "210456813e6cace0987e25a7a6a518cfd09599b3bc6c598a730631a6e0922f68"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:proto:otlp:v1.10.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.10.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.opentelemetry.io/proto/otlp",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.10.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.uber.org-mock-23309923dee8d489",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "87217d75f99b8085f911f39d6aca8bb160fac6aa4d6655db94b07f0db9f0bf76"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.uber.org/mock@v0.6.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.uber.org/mock",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.6.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-c182330966e30356",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "50fe3ebfa7c5ac121bd65f77e1b0e5fff9a69e82191032b489d835f8022f5f95"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:yaml:v4:v4.0.0-rc.4:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/go.yaml.in/yaml/v4@v4.0.0-rc.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "go.yaml.in/yaml/v4",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v4.0.0-rc.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-crypto-57f11d866f6bc63c",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "419e0cba8f131d7e828b3376bcf3dde5f0461f2a20add2bd7c6e302cf154b2da"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:go:ssh:v0.53.0:*:*:*:*:go:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.53.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/crypto",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.53.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-net-8bc04790cc201998",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "470f23fe11731af2546703415e702d7f9b150d5b7eeb948ad82ec8c42c59b79a"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:networking:v0.56.0:*:*:*:*:go:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/net@v0.56.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/net",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.56.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sync-4bc065e507c080cd",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "1cb208e314514ed091931629e0734517426cfce83aab68bef8a5db8348070b03"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:x\\/sync:v0.21.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/sync@v0.21.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/sync",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.21.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-sys-6f0e1964963ccc0f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "9e849fd85aba17c0c1812f8bcac224c7bac8131a0d1c9b31380b4fa78aed857c"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:x\\/sys:v0.46.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/sys@v0.46.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/sys",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.46.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-term-6c8890ef3b5a9c7f",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "d2b2ef0d10ad363d20664c885e10b239bd8e0331212d5a9ce01fa1aec061ae67"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:x\\/term:v0.44.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/term@v0.44.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/term",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.44.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-text-b173b656a278227d",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "b179b0a3d0f03f738af4467b3ea01d6a8a121a8cdf97fddaebfc4971bccf4611"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:text:v0.38.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/text@v0.38.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/text",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.38.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-golang.org-x-time-3777fc919349dc49",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "6dbae9f2dddb1947853b1d3ca6fb0c6114c2552324f3dbb8b4a6cd3996e9f3c5"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:x\\/time:v0.15.0:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/golang.org/x/time@v0.15.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "golang.org/x/time",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.15.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-7f6e7bb9556494e2",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "2a39f4374b42ac38220055be9463b8259ddc938e027a1bc940c0308fd405d06f"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260526163538-3dc84a4a5aaa",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "google.golang.org/genproto/googleapis/api",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20260526163538-3dc84a4a5aaa"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-2e01fc8ed05d84c3",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "9991c774f665d1d6c61c27e566002afd0e3af0359515c536c21841d8a028f1f9"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:genproto:v0.0.0-20260526163538-3dc84a4a5aaa:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260526163538-3dc84a4a5aaa",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "google.golang.org/genproto/googleapis/rpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v0.0.0-20260526163538-3dc84a4a5aaa"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-google.golang.org-grpc-840945fed03fa482",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "5679c8219f3c53338e28bba4422f88986cfc3b559da7c9c01869ef39f1085904"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:grpc:v1.81.1:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.81.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "google.golang.org/grpc",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.81.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-google.golang.org-protobuf-2aa602e4f7e59183",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "7d5e99c21368703c812cad1d8fe7e0f1e92d7157a0041b84a25a5b4d0c813551"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:google:protobuf:v1.36.11:*:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.11",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "google.golang.org/protobuf",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.36.11"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-gopkg.in-ini.v1-5fc72f8e5ed4f481",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "0e09f1fbafa77c4f887f38d410848d7b274f261f405cd36c59b18ff4acc2b0e0"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/gopkg.in/ini.v1@v1.67.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "gopkg.in/ini.v1",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.67.0"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-615fda44b5d5dc88",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "7f1566fc6cc0cc45aa2c7baf72d23dd4a4bd8613669963a85aed174d8252ec20"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:yaml_project:yaml:v3.0.1:*:*:*:*:go:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "gopkg.in/yaml.v3",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v3.0.1"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-gotest.tools-v3-371431f823101be2",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "ee4a107c829dcbe23c5137adc9c814a975920f0a60bf5f7729afaa46c98163c4"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/gotest.tools/v3@v3.5.2",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "gotest.tools/v3",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v3.5.2"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-stdlib-48da999b8862ef9c",
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "SECURITY",
            "referenceLocator": "cpe:2.3:a:golang:go:1.26.4:-:*:*:*:*:*:*",
            "referenceType": "cpe23Type"
          },
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/stdlib@1.26.4",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "BSD-3-Clause",
        "name": "stdlib",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "go1.26.4"
      },
      {
        "SPDXID": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-188707b59672403b",
        "checksums": [
          {
            "algorithm": "SHA256",
            "checksumValue": "467c4d87117524ebba089515a5eb5362fad71ddc70f63f63158819a48f9a9d26"
          }
        ],
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "externalRefs": [
          {
            "referenceCategory": "PACKAGE-MANAGER",
            "referenceLocator": "pkg:golang/tags.cncf.io/container-device-interface@v1.1.0",
            "referenceType": "purl"
          }
        ],
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "tags.cncf.io/container-device-interface",
        "sourceInfo": "acquired package info from go module information: /docker-compose",
        "supplier": "NOASSERTION",
        "versionInfo": "v1.1.0"
      },
      {
        "SPDXID": "SPDXRef-DocumentRoot-Directory-sbom-binary",
        "copyrightText": "NOASSERTION",
        "downloadLocation": "NOASSERTION",
        "filesAnalyzed": false,
        "licenseConcluded": "NOASSERTION",
        "licenseDeclared": "NOASSERTION",
        "name": "sbom-binary",
        "primaryPackagePurpose": "FILE",
        "supplier": "NOASSERTION"
      }
    ],
    "relationships": [
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-045f76df0297a244"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-074ce91a3fab4981"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-buildx-09fd9f9f78654577"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-shlex-0a9ce5b8ff532fff"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-shibumi-go-pathspec-0bf3e74b0354511a"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-skratchdot-open-golang-0cc62253ba91c587"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-0d3da0565de6af21"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-119e2856a308c998"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-1615f841949d9495"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-180857c9391f515d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-188707b59672403b"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-1e535971a63faa51"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-1f0bd20aee5c7f88"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-1f0eb4668df97056"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-2069f1951703de31"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.uber.org-mock-23309923dee8d489"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-hashstructure-v2-238bece83dee4795"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-2719210a0dcc7ef1"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-27567a67f222b944"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-2aa602e4f7e59183"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-2b2dcd09df0a5fa8"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-2bf6e12b22788fe6"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-2e01fc8ed05d84c3"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-307632f45607a734"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-31a86409f49174ef"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-35e91a433b51488f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-gotest.tools-v3-371431f823101be2"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-3777fc919349dc49"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-go-archive-38d9949a3230e1b4"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-3aa0247ba2d57e0c"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-3cd684df17853756"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-45b2bfab71fe9981"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-stdlib-48da999b8862ef9c"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-4921d7d97790eb03"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-4ad8f1f187d59ef2"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-4bc065e507c080cd"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-units-4e7823ecca2b2027"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mgutz-ansi-51516f3a292b8186"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-attestation-57399d626404c58e"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-575fcd72c7e5149c"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-57f11d866f6bc63c"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-inhies-go-bytesize-5af5ce86551eda22"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-5afbe3cf971dc0ef"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-gopkg.in-ini.v1-5fc72f8e5ed4f481"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-602c8383c8b3069e"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-capability-610547fbbc828459"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-615fda44b5d5dc88"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-61fa07e9da1c949b"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-623e9da4a43f01b6"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-642f764ee4370b49"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-6c8890ef3b5a9c7f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-6f0e1964963ccc0f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-6fd7ed28366b6e00"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-compose-spec-compose-go-v2-713b5700ef11b5f6"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-fvbommel-sortorder-72be54710fed3aed"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-go-75572ecccdc128ae"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-76da4570c18806fb"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-78248b8f86bb2eb5"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-buildkit-7becad3ca4a80d9d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-7d3176f1aca9d6c1"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracegrpc-7d85536aa8429cef"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-7f6e7bb9556494e2"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-buger-goterm-806fcac9dda6076d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-signal-80c5264650501308"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-840945fed03fa482"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-continuity-85a589aa8d0b6c90"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-85ae375705cdd8d1"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-86d3ee7598326660"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-87180d1795474177"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-878422ba1af55bc8"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-kballard-go-shellquote-884ecbab8ababe44"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-88f6e3be9206356b"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-8a1320cb4c8866ca"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-proto-otlp-8ab3cf70417bfde2"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-8bc04790cc201998"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-917808a426bb0e36"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-docs-tool-964d356226311d92"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-a07d8262904d8ae1"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-a0b120bdc0460a3b"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-AlecAivazis-survey-v2-a136c8a6dc9349e0"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-a177e8f5dbf5c430"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-a496ac7c93d969fb"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-a5ca3e24de481269"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-in-toto-golang-a615f62756b760b8"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-a7267222137f064e"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-locker-a79f7ed3dac8529e"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-a8480e07f203f0cd"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-go-csvvalue-a9730c988e0f4555"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-abaedddb764d7be2"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-eiannone-keyboard-acacf8b87e48bfb6"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetrichttp-aeed69416daf60e1"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-console-b1157561477bbe6b"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-b173b656a278227d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-b2b6c3b8bf74bade"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-b334a1069009b796"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetricgrpc-b6a2832030495227"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-ba77eb2e1842053c"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-c182330966e30356"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-c59e3552352a6190"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tilt-dev-fsnotify-c781ec222e5e817d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-c9106ddc7a598dc1"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-cd601fb4ce7cc95d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-cebb4319df9ef709"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-cf50af344cc732e4"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-gofrs-flock-d005d53b7a338f92"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-httptrace-otelhttptrace-d14557625cfa05e3"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-DefangLabs-secret-detector-d241272003b93dee"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-d2f06e141f01fa90"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-d38672ac678914b7"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-d6740afea85f6584"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-morikuni-aec-e017d500770cf432"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-e461205794731844"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-term-e5f6fa6c4de2cf8d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-vt100-eaf60ea50c6bda09"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-fsutil-f12c5d595c9b9d1d"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-symlink-f38ba48230504ed1"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-f500d753b791be37"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracehttp-f54054a8ce1f67a0"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-f946f9b4b13dce22"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-f9c1ede60117c5da"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-fa40e2f8b782c371"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-fb747c292d48740f"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-fbc3f534c67c7ed5"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-fddabd8048cb5bc0"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "DEPENDENCY_OF",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-xhit-go-str2duration-v2-ff011e6d673e6e57"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-045f76df0297a244"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-074ce91a3fab4981"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-buildx-09fd9f9f78654577"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-shlex-0a9ce5b8ff532fff"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-shibumi-go-pathspec-0bf3e74b0354511a"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-skratchdot-open-golang-0cc62253ba91c587"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-cobra-0d3da0565de6af21"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-119e2856a308c998"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-klauspost-compress-1615f841949d9495"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-spf13-pflag-180857c9391f515d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-188707b59672403b"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-1e535971a63faa51"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-logr-1f0bd20aee5c7f88"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-1f0eb4668df97056"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-2069f1951703de31"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.uber.org-mock-23309923dee8d489"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mitchellh-hashstructure-v2-238bece83dee4795"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-2719210a0dcc7ef1"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-27567a67f222b944"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-protobuf-2aa602e4f7e59183"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-pkg-errors-2b2dcd09df0a5fa8"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-2bf6e12b22788fe6"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-2e01fc8ed05d84c3"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-go-cmp-307632f45607a734"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-31a86409f49174ef"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-35e91a433b51488f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-gotest.tools-v3-371431f823101be2"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-time-3777fc919349dc49"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-go-archive-38d9949a3230e1b4"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-3aa0247ba2d57e0c"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-platforms-3cd684df17853756"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-45b2bfab71fe9981"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-stdlib-48da999b8862ef9c"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-log-4921d7d97790eb03"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-4ad8f1f187d59ef2"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sync-4bc065e507c080cd"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-units-4e7823ecca2b2027"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mgutz-ansi-51516f3a292b8186"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-attestation-57399d626404c58e"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-575fcd72c7e5149c"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-crypto-57f11d866f6bc63c"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-inhies-go-bytesize-5af5ce86551eda22"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-5afbe3cf971dc0ef"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-gopkg.in-ini.v1-5fc72f8e5ed4f481"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-602c8383c8b3069e"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-capability-610547fbbc828459"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-615fda44b5d5dc88"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-distribution-reference-61fa07e9da1c949b"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-userns-623e9da4a43f01b6"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-642f764ee4370b49"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-term-6c8890ef3b5a9c7f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-sys-6f0e1964963ccc0f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-6fd7ed28366b6e00"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-compose-spec-compose-go-v2-713b5700ef11b5f6"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-fvbommel-sortorder-72be54710fed3aed"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-go-75572ecccdc128ae"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-76da4570c18806fb"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-78248b8f86bb2eb5"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-buildkit-7becad3ca4a80d9d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-7d3176f1aca9d6c1"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracegrpc-7d85536aa8429cef"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-7f6e7bb9556494e2"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-buger-goterm-806fcac9dda6076d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-signal-80c5264650501308"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-google.golang.org-grpc-840945fed03fa482"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-continuity-85a589aa8d0b6c90"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-client-85ae375705cdd8d1"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-86d3ee7598326660"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-87180d1795474177"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-878422ba1af55bc8"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-kballard-go-shellquote-884ecbab8ababe44"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-go-logr-stdr-88f6e3be9206356b"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-8a1320cb4c8866ca"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-proto-otlp-8ab3cf70417bfde2"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-net-8bc04790cc201998"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-917808a426bb0e36"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-docs-tool-964d356226311d92"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-a07d8262904d8ae1"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-a0b120bdc0460a3b"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-AlecAivazis-survey-v2-a136c8a6dc9349e0"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-a177e8f5dbf5c430"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-a496ac7c93d969fb"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-a5ca3e24de481269"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-in-toto-in-toto-golang-a615f62756b760b8"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-a7267222137f064e"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-locker-a79f7ed3dac8529e"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-a8480e07f203f0cd"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-go-csvvalue-a9730c988e0f4555"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-user-abaedddb764d7be2"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-eiannone-keyboard-acacf8b87e48bfb6"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetrichttp-aeed69416daf60e1"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-console-b1157561477bbe6b"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-golang.org-x-text-b173b656a278227d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-b2b6c3b8bf74bade"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-b334a1069009b796"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetricgrpc-b6a2832030495227"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-ba77eb2e1842053c"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-c182330966e30356"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-c59e3552352a6190"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tilt-dev-fsnotify-c781ec222e5e817d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-moby-api-c9106ddc7a598dc1"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-cd601fb4ce7cc95d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-cebb4319df9ef709"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-cf50af344cc732e4"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-gofrs-flock-d005d53b7a338f92"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-httptrace-otelhttptrace-d14557625cfa05e3"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-DefangLabs-secret-detector-d241272003b93dee"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-units-d2f06e141f01fa90"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-google-uuid-d38672ac678914b7"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-d6740afea85f6584"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-morikuni-aec-e017d500770cf432"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-cli-e461205794731844"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-term-e5f6fa6c4de2cf8d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-vt100-eaf60ea50c6bda09"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-tonistiigi-fsutil-f12c5d595c9b9d1d"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-moby-sys-symlink-f38ba48230504ed1"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-f500d753b791be37"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracehttp-f54054a8ce1f67a0"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-f946f9b4b13dce22"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-go-connections-f9c1ede60117c5da"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-fa40e2f8b782c371"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-fb747c292d48740f"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-docker-docker-fbc3f534c67c7ed5"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-fddabd8048cb5bc0"
      },
      {
        "comment": "evident-by: indicates the package's existence is evident by the given file",
        "relatedSpdxElement": "SPDXRef-File-docker-compose-692def66df504244",
        "relationshipType": "OTHER",
        "spdxElementId": "SPDXRef-Package-go-module-github.com-xhit-go-str2duration-v2-ff011e6d673e6e57"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-AlecAivazis-survey-v2-a136c8a6dc9349e0",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-DefangLabs-secret-detector-d241272003b93dee",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-acarl005-stripansi-cd601fb4ce7cc95d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-buger-goterm-806fcac9dda6076d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cenkalti-backoff-v5-a0b120bdc0460a3b",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-cespare-xxhash-v2-f500d753b791be37",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-clipperhouse-uax29-v2-78248b8f86bb2eb5",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-compose-spec-compose-go-v2-713b5700ef11b5f6",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-console-b1157561477bbe6b",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-api-642f764ee4370b49",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-containerd-v2-35e91a433b51488f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-continuity-85a589aa8d0b6c90",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-a177e8f5dbf5c430",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-errdefs-pkg-a7267222137f064e",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-log-4921d7d97790eb03",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-platforms-3cd684df17853756",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-ttrpc-2069f1951703de31",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-containerd-typeurl-v2-b334a1069009b796",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-distribution-reference-61fa07e9da1c949b",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-buildx-09fd9f9f78654577",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-cli-e461205794731844",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-cli-docs-tool-964d356226311d92",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-compose-v5-b16c425502dd2eb4",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-fbc3f534c67c7ed5",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-docker-credential-helpers-5afbe3cf971dc0ef",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-connections-f9c1ede60117c5da",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-docker-go-units-d2f06e141f01fa90",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-eiannone-keyboard-acacf8b87e48bfb6",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-felixge-httpsnoop-1f0eb4668df97056",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-fvbommel-sortorder-72be54710fed3aed",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-logr-1f0bd20aee5c7f88",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-logr-stdr-88f6e3be9206356b",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-go-viper-mapstructure-v2-3aa0247ba2d57e0c",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-gofrs-flock-d005d53b7a338f92",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-golang-jwt-jwt-v5-d6740afea85f6584",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-go-cmp-307632f45607a734",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-shlex-0a9ce5b8ff532fff",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-google-uuid-d38672ac678914b7",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-grpc-ecosystem-grpc-gateway-v2-074ce91a3fab4981",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-errwrap-2719210a0dcc7ef1",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-cleanhttp-31a86409f49174ef",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-multierror-a496ac7c93d969fb",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-hashicorp-go-version-f946f9b4b13dce22",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-in-toto-attestation-57399d626404c58e",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-in-toto-in-toto-golang-a615f62756b760b8",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-inhies-go-bytesize-5af5ce86551eda22",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-jonboulle-clockwork-045f76df0297a244",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-kballard-go-shellquote-884ecbab8ababe44",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-klauspost-compress-1615f841949d9495",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-colorable-2bf6e12b22788fe6",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-isatty-917808a426bb0e36",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-runewidth-fddabd8048cb5bc0",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mattn-go-shellwords-27567a67f222b944",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mgutz-ansi-51516f3a292b8186",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-mitchellh-hashstructure-v2-238bece83dee4795",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-buildkit-7becad3ca4a80d9d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-docker-image-spec-a8480e07f203f0cd",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-go-archive-38d9949a3230e1b4",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-locker-a79f7ed3dac8529e",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-api-c9106ddc7a598dc1",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-moby-client-85ae375705cdd8d1",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-patternmatcher-45b2bfab71fe9981",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-atomicwriter-cebb4319df9ef709",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-capability-610547fbbc828459",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-sequential-878422ba1af55bc8",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-signal-80c5264650501308",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-symlink-f38ba48230504ed1",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-user-abaedddb764d7be2",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-sys-userns-623e9da4a43f01b6",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-moby-term-e5f6fa6c4de2cf8d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-morikuni-aec-e017d500770cf432",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-go-digest-87180d1795474177",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-opencontainers-image-spec-cf50af344cc732e4",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pelletier-go-toml-v2-b2b6c3b8bf74bade",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-pkg-errors-2b2dcd09df0a5fa8",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-planetscale-vtprotobuf-ba77eb2e1842053c",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-santhosh-tekuri-jsonschema-v6-86d3ee7598326660",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-secure-systems-lab-go-securesystemslib-6fd7ed28366b6e00",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-shibumi-go-pathspec-0bf3e74b0354511a",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-8a1320cb4c8866ca",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sigstore-sigstore-go-75572ecccdc128ae",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-sirupsen-logrus-c59e3552352a6190",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-skratchdot-open-golang-0cc62253ba91c587",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-cobra-0d3da0565de6af21",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-spf13-pflag-180857c9391f515d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tilt-dev-fsnotify-c781ec222e5e817d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-dchapes-mode-575fcd72c7e5149c",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-fsutil-f12c5d595c9b9d1d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-go-csvvalue-a9730c988e0f4555",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-units-4e7823ecca2b2027",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-tonistiigi-vt100-eaf60ea50c6bda09",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-xhit-go-str2duration-v2-ff011e6d673e6e57",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-github.com-youmark-pkcs8-a07d8262904d8ae1",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-auto-sdk-fa40e2f8b782c371",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-google.golang.org-grpc-otelgrpc-a5ca3e24de481269",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-httptrace-otelhttptrace-d14557625cfa05e3",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-contrib-instrumentation-net-http-otelhttp-1e535971a63faa51",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-119e2856a308c998",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetricgrpc-b6a2832030495227",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlpmetric-otlpmetrichttp-aeed69416daf60e1",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-fb747c292d48740f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracegrpc-7d85536aa8429cef",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-exporters-otlp-otlptrace-otlptracehttp-f54054a8ce1f67a0",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-metric-602c8383c8b3069e",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-7d3176f1aca9d6c1",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-sdk-metric-4ad8f1f187d59ef2",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-otel-trace-76da4570c18806fb",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.opentelemetry.io-proto-otlp-8ab3cf70417bfde2",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.uber.org-mock-23309923dee8d489",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-go.yaml.in-yaml-v4-c182330966e30356",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-crypto-57f11d866f6bc63c",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-net-8bc04790cc201998",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sync-4bc065e507c080cd",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-sys-6f0e1964963ccc0f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-term-6c8890ef3b5a9c7f",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-text-b173b656a278227d",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-golang.org-x-time-3777fc919349dc49",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-api-7f6e7bb9556494e2",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-genproto-googleapis-rpc-2e01fc8ed05d84c3",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-grpc-840945fed03fa482",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-google.golang.org-protobuf-2aa602e4f7e59183",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-ini.v1-5fc72f8e5ed4f481",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-gopkg.in-yaml.v3-615fda44b5d5dc88",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-gotest.tools-v3-371431f823101be2",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-stdlib-48da999b8862ef9c",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-Package-go-module-tags.cncf.io-container-device-interface-188707b59672403b",
        "relationshipType": "CONTAINS",
        "spdxElementId": "SPDXRef-DocumentRoot-Directory-sbom-binary"
      },
      {
        "relatedSpdxElement": "SPDXRef-DocumentRoot-Directory-sbom-binary",
        "relationshipType": "DESCRIBES",
        "spdxElementId": "SPDXRef-DOCUMENT"
      }
    ],
    "spdxVersion": "SPDX-2.3"
  }
}