{ "spdxVersion": "SPDX-2.3", "dataLicense": "CC0-1.0", "SPDXID": "SPDXRef-DOCUMENT", "name": "build/payload/kube-state-metrics-v2.20.0-tpio.1", "documentNamespace": "http://trivy.dev/container_image/build/payload/kube-state-metrics-v2.20.0-tpio.1-2711f0a8-3276-4f1b-9d43-4d3f25651640", "creationInfo": { "creators": [ "Organization: aquasecurity", "Tool: trivy-0.75.0" ], "created": "2026-10-15T16:39:18Z" }, "packages": [ { "name": "kube-state-metrics", "SPDXID": "SPDXRef-Application-3d96aa61f4333256", "downloadLocation": "NONE", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "primaryPackagePurpose": "APPLICATION", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "Class: lang-pkgs" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "Type: gobinary" } ] }, { "name": "build/payload/kube-state-metrics-v2.20.0-tpio.1", "SPDXID": "SPDXRef-ContainerImage-3cc25b491d1328b9", "downloadLocation": "NONE", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "primaryPackagePurpose": "CONTAINER", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "DiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "DiffID: sha256:187cfc6d1e3e8a40a5e64653bcd3239c140807dcf1c09e48021178705a5a6139" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "DiffID: sha256:275a30dd8ce958b21daa9ad962c6fbc09f98306ee2f486b65c9075dc257b1412" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "DiffID: sha256:4c7ac49e6b7736c4c4e9a7a39b9a9845e5ed2e3b531e480746a706e8aa0d68d4" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "DiffID: sha256:4cde6b0bb6f50a5f255eef7b2a42162c661cf776b803225dcac9a659e396bb6b" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "DiffID: sha256:4d049f83d9cf21d1f5cc0e11deaf36df02790d0e60c1a3829538fb4b61685368" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "DiffID: sha256:50abe06dfc0957e14cb8332ed242e8b884ef2563a9eb202e5172f243f62792f7" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "DiffID: sha256:5fd2536c39c0700be8b7b4344e375196da2f126842fd8ede66996a18860a3890" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "DiffID: sha256:621c35e751a51a9a9dc3e80aa0b7fe8be2a93402ea6ccd307d30852cd7776cda" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "DiffID: sha256:6f1cdceb6a3146f0ccb986521156bef8a422cdbb0863396f7f751f575ba308f4" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "DiffID: sha256:ad51d0769d16ba578106a177987dfe3d2e02c1668c852b795b2f6b024068242a" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "DiffID: sha256:af5aa97ebe6ce1604747ec1e21af7136ded391bcabe4acef882e718a87c86bcc" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "DiffID: sha256:bd3cdfae1d3fdd83a2231d608969b38b82349777c2fff9a7c12d54f8ac5c9b38" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "DiffID: sha256:bec7e6bb35e05d1284f28b10d2150c259717d91c658c4c10c08424bb9466caba" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "DiffID: sha256:c8b007d0206e4b10ed4d3b3d99dfeab47c2648e82011989fd78a5731baf33fc3" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "DiffID: sha256:d2d621da2ffd54b3fa775eb6a1db3b2b337efd77fab81df7e7bacd189bb94c15" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "DiffID: sha256:fdd766273bb37387dbf2c0539f17d1655f7c98f16d46554414810d7a29419177" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "ImageID: sha256:e3c751bca1ecc8ea22f3b50441a145e5d331765f318d336b37fafb7d8441e44e" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "Labels:io.buildah.version: 1.43.1" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "Labels:io.thepeoples.hardened.ladder: b" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "Labels:io.thepeoples.hardened.source-status: export vendor and base sources before publication" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "Labels:io.thepeoples.hardened.toolchain: go1.27.2" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "Labels:io.thepeoples.hardened.upstream: registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.0@sha256:42cfe3723a5f058171c627537fb57a3ea0f26e4380fa18555a95cb1a1b4cfc5b" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "Labels:org.opencontainers.image.revision: 4ffeda2ef866b0fef372849825a803296483b336" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "Labels:org.opencontainers.image.source: https://github.com/kubernetes/kube-state-metrics" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "Labels:org.opencontainers.image.version: v2.20.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "SchemaVersion: 2" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "Size: 125530112" } ] }, { "name": "base-files", "SPDXID": "SPDXRef-Package-27f8cc7cccd02bf3", "versionInfo": "13.8+deb13u6", "supplier": "Organization: Santiago Vila \u003csanvila@debian.org\u003e", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "built package from: base-files 13.8+deb13u6", "licenseConcluded": "GPL-2.0-or-later AND LicenseRef-12c6299793cdf486", "licenseDeclared": "GPL-2.0-or-later AND LicenseRef-12c6299793cdf486", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:deb/debian/base-files@13.8%2Bdeb13u6?arch=amd64\u0026distro=debian-13.6" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:50abe06dfc0957e14cb8332ed242e8b884ef2563a9eb202e5172f243f62792f7" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:d0839f8c002c9b32fcea1f39e020f4dd569a300788138838027c72422ef380af" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: base-files@13.8+deb13u6" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: debian" } ] }, { "name": "cel.dev/expr", "SPDXID": "SPDXRef-Package-4b0e3284d2e40733", "versionInfo": "v0.25.2", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/cel.dev/expr@v0.25.2" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:fdd766273bb37387dbf2c0539f17d1655f7c98f16d46554414810d7a29419177" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:05576f032a31971fcdcda4e4a32d7ba97d11b9b970988ed9588e2f7a681abd3e" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: cel.dev/expr@v0.25.2" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/KimMachineGun/automemlimit", "SPDXID": "SPDXRef-Package-12262ad19c6fa302", "versionInfo": "v0.7.5", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/kimmachinegun/automemlimit@v0.7.5" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/KimMachineGun/automemlimit@v0.7.5" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/antlr4-go/antlr/v4", "SPDXID": "SPDXRef-Package-fe9c49c27e09b4b", "versionInfo": "v4.13.1", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/antlr4-go/antlr/v4@v4.13.1" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:fdd766273bb37387dbf2c0539f17d1655f7c98f16d46554414810d7a29419177" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:05576f032a31971fcdcda4e4a32d7ba97d11b9b970988ed9588e2f7a681abd3e" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/antlr4-go/antlr/v4@v4.13.1" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/beorn7/perks", "SPDXID": "SPDXRef-Package-6141767667e1da86", "versionInfo": "v1.0.1", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/beorn7/perks@v1.0.1" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/beorn7/perks@v1.0.1" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/blang/semver/v4", "SPDXID": "SPDXRef-Package-2a261a3b2f59f060", "versionInfo": "v4.0.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/blang/semver/v4@v4.0.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/blang/semver/v4@v4.0.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/cenkalti/backoff/v5", "SPDXID": "SPDXRef-Package-2b61a950a0168619", "versionInfo": "v5.0.3", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/cenkalti/backoff/v5@v5.0.3" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/cespare/xxhash/v2", "SPDXID": "SPDXRef-Package-578b409adc8d769", "versionInfo": "v2.3.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/cespare/xxhash/v2@v2.3.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/coreos/go-systemd/v22", "SPDXID": "SPDXRef-Package-b2d53ac4f7e030b", "versionInfo": "v22.7.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/coreos/go-systemd/v22@v22.7.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/coreos/go-systemd/v22@v22.7.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/davecgh/go-spew", "SPDXID": "SPDXRef-Package-2a960fdbf02a0d2a", "versionInfo": "v1.1.2-0.20180830191138-d8f796af33cc", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/dgryski/go-jump", "SPDXID": "SPDXRef-Package-357138332f88ec1a", "versionInfo": "v0.0.0-20211018200510-ba001c3ffce0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/dgryski/go-jump@v0.0.0-20211018200510-ba001c3ffce0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/dgryski/go-jump@v0.0.0-20211018200510-ba001c3ffce0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/dlclark/regexp2/v2", "SPDXID": "SPDXRef-Package-b2c9cf22e28d8d80", "versionInfo": "v2.6.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/dlclark/regexp2/v2@v2.6.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/dlclark/regexp2/v2@v2.6.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/emicklei/go-restful/v3", "SPDXID": "SPDXRef-Package-604ff633c35432da", "versionInfo": "v3.13.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/emicklei/go-restful/v3@v3.13.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/felixge/httpsnoop", "SPDXID": "SPDXRef-Package-7273d24404cd4e43", "versionInfo": "v1.0.4", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/felixge/httpsnoop@v1.0.4" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/fsnotify/fsnotify", "SPDXID": "SPDXRef-Package-28e07cc131569e1f", "versionInfo": "v1.10.1", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/fsnotify/fsnotify@v1.10.1" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/fxamacker/cbor/v2", "SPDXID": "SPDXRef-Package-ca3caa6bcabbae03", "versionInfo": "v2.9.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/fxamacker/cbor/v2@v2.9.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/go-logr/logr", "SPDXID": "SPDXRef-Package-14fb30ace4035901", "versionInfo": "v1.4.4", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/logr@v1.4.4" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/go-logr/logr@v1.4.4" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/go-logr/stdr", "SPDXID": "SPDXRef-Package-40325c655ed8922", "versionInfo": "v1.2.2", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-logr/stdr@v1.2.2" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/go-logr/stdr@v1.2.2" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/go-openapi/jsonpointer", "SPDXID": "SPDXRef-Package-3f4bec9cf81381a6", "versionInfo": "v0.21.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-openapi/jsonpointer@v0.21.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/go-openapi/jsonpointer@v0.21.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/go-openapi/jsonreference", "SPDXID": "SPDXRef-Package-d323bf027329a6a6", "versionInfo": "v0.20.2", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-openapi/jsonreference@v0.20.2" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/go-openapi/jsonreference@v0.20.2" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/go-openapi/swag", "SPDXID": "SPDXRef-Package-ace83cb0f96e98eb", "versionInfo": "v0.23.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-openapi/swag@v0.23.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/go-openapi/swag@v0.23.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/go-viper/mapstructure/v2", "SPDXID": "SPDXRef-Package-f7950ca87608ad18", "versionInfo": "v2.4.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.4.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/go-viper/mapstructure/v2@v2.4.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/gobuffalo/flect", "SPDXID": "SPDXRef-Package-eaeabbfdde9f8b07", "versionInfo": "v1.0.3", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/gobuffalo/flect@v1.0.3" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/gobuffalo/flect@v1.0.3" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/golang-jwt/jwt/v5", "SPDXID": "SPDXRef-Package-f0e6bba25d965b92", "versionInfo": "v5.3.1", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/golang-jwt/jwt/v5@v5.3.1" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/google/cel-go", "SPDXID": "SPDXRef-Package-38958c50e92ae811", "versionInfo": "v0.29.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/cel-go@v0.29.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:fdd766273bb37387dbf2c0539f17d1655f7c98f16d46554414810d7a29419177" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:05576f032a31971fcdcda4e4a32d7ba97d11b9b970988ed9588e2f7a681abd3e" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/google/cel-go@v0.29.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/google/gnostic-models", "SPDXID": "SPDXRef-Package-47f22868a2f5c0f4", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/gnostic-models@v0.7.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/google/gnostic-models@v0.7.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/google/go-cmp", "SPDXID": "SPDXRef-Package-19b03b08a4a41fc1", "versionInfo": "v0.7.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/go-cmp@v0.7.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/google/go-cmp@v0.7.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/google/uuid", "SPDXID": "SPDXRef-Package-308c6ebab961faac", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/google/uuid@v1.6.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/google/uuid@v1.6.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/grpc-ecosystem/grpc-gateway/v2", "SPDXID": "SPDXRef-Package-6f44a2b4240eac57", "versionInfo": "v2.29.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:fdd766273bb37387dbf2c0539f17d1655f7c98f16d46554414810d7a29419177" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:05576f032a31971fcdcda4e4a32d7ba97d11b9b970988ed9588e2f7a681abd3e" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/josharian/intern", "SPDXID": "SPDXRef-Package-1c7d4afe041e3d72", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/josharian/intern@v1.0.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/josharian/intern@v1.0.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/jpillora/backoff", "SPDXID": "SPDXRef-Package-eee3fb57bad9b969", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/jpillora/backoff@v1.0.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/jpillora/backoff@v1.0.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/json-iterator/go", "SPDXID": "SPDXRef-Package-5b2759f5a6bddbfc", "versionInfo": "v1.1.12", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/json-iterator/go@v1.1.12" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/json-iterator/go@v1.1.12" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/mailru/easyjson", "SPDXID": "SPDXRef-Package-1d73bd6162375889", "versionInfo": "v0.7.7", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mailru/easyjson@v0.7.7" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/mailru/easyjson@v0.7.7" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/mdlayher/socket", "SPDXID": "SPDXRef-Package-35a79359fb1fb553", "versionInfo": "v0.6.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mdlayher/socket@v0.6.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/mdlayher/socket@v0.6.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/mdlayher/vsock", "SPDXID": "SPDXRef-Package-da488a5dd2a6a52b", "versionInfo": "v1.3.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mdlayher/vsock@v1.3.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/mdlayher/vsock@v1.3.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/modern-go/concurrent", "SPDXID": "SPDXRef-Package-c1537874806ed36a", "versionInfo": "v0.0.0-20180306012644-bacd9c7ef1dd", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/modern-go/reflect2", "SPDXID": "SPDXRef-Package-637a51189aa13404", "versionInfo": "v1.0.3-0.20250322232337-35a7c28c31ee", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/munnerz/goautoneg", "SPDXID": "SPDXRef-Package-b3992f347013e3d9", "versionInfo": "v0.0.0-20191010083416-a7dc8b61c822", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/mwitkow/go-conntrack", "SPDXID": "SPDXRef-Package-c3749f6a5938c491", "versionInfo": "v0.0.0-20190716064945-2f068394615f", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/mwitkow/go-conntrack@v0.0.0-20190716064945-2f068394615f" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/mwitkow/go-conntrack@v0.0.0-20190716064945-2f068394615f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/netresearch/go-cron", "SPDXID": "SPDXRef-Package-6370c5a0b80d451e", "versionInfo": "v0.15.1", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/netresearch/go-cron@v0.15.1" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/netresearch/go-cron@v0.15.1" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/oklog/run", "SPDXID": "SPDXRef-Package-e04733f0acd56e07", "versionInfo": "v1.2.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/oklog/run@v1.2.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/oklog/run@v1.2.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/pbnjay/memory", "SPDXID": "SPDXRef-Package-823d2ae9390de751", "versionInfo": "v0.0.0-20210728143218-7b4eea64cf58", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pbnjay/memory@v0.0.0-20210728143218-7b4eea64cf58" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/pbnjay/memory@v0.0.0-20210728143218-7b4eea64cf58" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/pelletier/go-toml/v2", "SPDXID": "SPDXRef-Package-b15616112cfd63f0", "versionInfo": "v2.2.4", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pelletier/go-toml/v2@v2.2.4" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/pelletier/go-toml/v2@v2.2.4" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/pmezard/go-difflib", "SPDXID": "SPDXRef-Package-89fadf686d99eeea", "versionInfo": "v1.0.1-0.20181226105442-5d4384ee4fb2", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/prometheus/client_golang", "SPDXID": "SPDXRef-Package-3d46d518c88420c0", "versionInfo": "v1.24.1", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/client_golang@v1.24.1" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/prometheus/client_golang@v1.24.1" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/prometheus/client_model", "SPDXID": "SPDXRef-Package-81a0fc6b0a6f5a50", "versionInfo": "v0.6.2", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/client_model@v0.6.2" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/prometheus/client_model@v0.6.2" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/prometheus/common", "SPDXID": "SPDXRef-Package-597819019b62ebf8", "versionInfo": "v0.70.1", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/common@v0.70.1" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/prometheus/common@v0.70.1" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/prometheus/exporter-toolkit", "SPDXID": "SPDXRef-Package-28afafaa14a4f90e", "versionInfo": "v0.17.1", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/exporter-toolkit@v0.17.1" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/prometheus/exporter-toolkit@v0.17.1" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/prometheus/procfs", "SPDXID": "SPDXRef-Package-ed716379b57c503e", "versionInfo": "v0.21.1", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/prometheus/procfs@v0.21.1" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/prometheus/procfs@v0.21.1" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/sagikazarmark/locafero", "SPDXID": "SPDXRef-Package-82928618e1d9454c", "versionInfo": "v0.11.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sagikazarmark/locafero@v0.11.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/sagikazarmark/locafero@v0.11.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/sourcegraph/conc", "SPDXID": "SPDXRef-Package-538b1d077f32f9e4", "versionInfo": "v0.3.1-0.20240121214520-5f936abd7ae8", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/sourcegraph/conc@v0.3.1-0.20240121214520-5f936abd7ae8" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/spf13/afero", "SPDXID": "SPDXRef-Package-ef280874f24ec006", "versionInfo": "v1.15.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/afero@v1.15.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/spf13/afero@v1.15.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/spf13/cast", "SPDXID": "SPDXRef-Package-cf1dad59bf66b3f7", "versionInfo": "v1.10.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cast@v1.10.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/spf13/cast@v1.10.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/spf13/cobra", "SPDXID": "SPDXRef-Package-ef49e6dd936fd610", "versionInfo": "v1.10.2", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/cobra@v1.10.2" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/spf13/cobra@v1.10.2" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/spf13/pflag", "SPDXID": "SPDXRef-Package-dfd784db9a7c6d37", "versionInfo": "v1.0.10", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/pflag@v1.0.10" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/spf13/pflag@v1.0.10" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/spf13/viper", "SPDXID": "SPDXRef-Package-25078db6a9fae536", "versionInfo": "v1.21.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/spf13/viper@v1.21.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/spf13/viper@v1.21.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/subosito/gotenv", "SPDXID": "SPDXRef-Package-228ce380f5e071d9", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/subosito/gotenv@v1.6.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/subosito/gotenv@v1.6.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "github.com/x448/float16", "SPDXID": "SPDXRef-Package-aaddc643d9863fa5", "versionInfo": "v0.8.4", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/github.com/x448/float16@v0.8.4" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: github.com/x448/float16@v0.8.4" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "go.opentelemetry.io/auto/sdk", "SPDXID": "SPDXRef-Package-eb561c0598052af3", "versionInfo": "v1.2.1", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: go.opentelemetry.io/auto/sdk@v1.2.1" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "SPDXID": "SPDXRef-Package-c8c688d455ea472b", "versionInfo": "v0.65.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.65.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.65.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "go.opentelemetry.io/otel", "SPDXID": "SPDXRef-Package-5b65c1bca6d25cb", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel@v1.45.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:fdd766273bb37387dbf2c0539f17d1655f7c98f16d46554414810d7a29419177" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:05576f032a31971fcdcda4e4a32d7ba97d11b9b970988ed9588e2f7a681abd3e" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: go.opentelemetry.io/otel@v1.45.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace", "SPDXID": "SPDXRef-Package-580e9a1a1a495ca5", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.45.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:fdd766273bb37387dbf2c0539f17d1655f7c98f16d46554414810d7a29419177" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:05576f032a31971fcdcda4e4a32d7ba97d11b9b970988ed9588e2f7a681abd3e" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.45.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc", "SPDXID": "SPDXRef-Package-e025a71c9aeed52f", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.45.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:fdd766273bb37387dbf2c0539f17d1655f7c98f16d46554414810d7a29419177" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:05576f032a31971fcdcda4e4a32d7ba97d11b9b970988ed9588e2f7a681abd3e" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.45.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "go.opentelemetry.io/otel/metric", "SPDXID": "SPDXRef-Package-446595c6ad1462bc", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/metric@v1.45.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:fdd766273bb37387dbf2c0539f17d1655f7c98f16d46554414810d7a29419177" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:05576f032a31971fcdcda4e4a32d7ba97d11b9b970988ed9588e2f7a681abd3e" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: go.opentelemetry.io/otel/metric@v1.45.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "go.opentelemetry.io/otel/sdk", "SPDXID": "SPDXRef-Package-7108106cfece65ce", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.45.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:fdd766273bb37387dbf2c0539f17d1655f7c98f16d46554414810d7a29419177" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:05576f032a31971fcdcda4e4a32d7ba97d11b9b970988ed9588e2f7a681abd3e" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: go.opentelemetry.io/otel/sdk@v1.45.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "go.opentelemetry.io/otel/trace", "SPDXID": "SPDXRef-Package-97d2f2db7ea1f945", "versionInfo": "v1.45.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/otel/trace@v1.45.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:fdd766273bb37387dbf2c0539f17d1655f7c98f16d46554414810d7a29419177" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:05576f032a31971fcdcda4e4a32d7ba97d11b9b970988ed9588e2f7a681abd3e" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: go.opentelemetry.io/otel/trace@v1.45.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "go.opentelemetry.io/proto/otlp", "SPDXID": "SPDXRef-Package-dccebd3e88e43a4", "versionInfo": "v1.11.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.11.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:fdd766273bb37387dbf2c0539f17d1655f7c98f16d46554414810d7a29419177" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:05576f032a31971fcdcda4e4a32d7ba97d11b9b970988ed9588e2f7a681abd3e" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: go.opentelemetry.io/proto/otlp@v1.11.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "go.yaml.in/yaml/v2", "SPDXID": "SPDXRef-Package-eeb428d53c94e39e", "versionInfo": "v2.4.4", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: go.yaml.in/yaml/v2@v2.4.4" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "go.yaml.in/yaml/v3", "SPDXID": "SPDXRef-Package-72aadc949d6819dc", "versionInfo": "v3.0.4", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/go.yaml.in/yaml/v3@v3.0.4" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: go.yaml.in/yaml/v3@v3.0.4" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "golang.org/x/crypto", "SPDXID": "SPDXRef-Package-12d6fdcdb8804205", "versionInfo": "v0.57.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/crypto@v0.57.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:fdd766273bb37387dbf2c0539f17d1655f7c98f16d46554414810d7a29419177" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:05576f032a31971fcdcda4e4a32d7ba97d11b9b970988ed9588e2f7a681abd3e" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: golang.org/x/crypto@v0.57.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "golang.org/x/exp", "SPDXID": "SPDXRef-Package-7942d834629abb45", "versionInfo": "v0.0.0-20251219203646-944ab1f22d93", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/exp@v0.0.0-20251219203646-944ab1f22d93" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: golang.org/x/exp@v0.0.0-20251219203646-944ab1f22d93" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "golang.org/x/net", "SPDXID": "SPDXRef-Package-4f1bd6850fea616e", "versionInfo": "v0.60.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/net@v0.60.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:fdd766273bb37387dbf2c0539f17d1655f7c98f16d46554414810d7a29419177" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:05576f032a31971fcdcda4e4a32d7ba97d11b9b970988ed9588e2f7a681abd3e" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: golang.org/x/net@v0.60.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "golang.org/x/oauth2", "SPDXID": "SPDXRef-Package-1052eb956f47264c", "versionInfo": "v0.36.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/oauth2@v0.36.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: golang.org/x/oauth2@v0.36.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "golang.org/x/sync", "SPDXID": "SPDXRef-Package-9aebc1434243c118", "versionInfo": "v0.23.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sync@v0.23.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:fdd766273bb37387dbf2c0539f17d1655f7c98f16d46554414810d7a29419177" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:05576f032a31971fcdcda4e4a32d7ba97d11b9b970988ed9588e2f7a681abd3e" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: golang.org/x/sync@v0.23.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "golang.org/x/sys", "SPDXID": "SPDXRef-Package-e6b0b7fc97ac5f10", "versionInfo": "v0.48.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/sys@v0.48.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:fdd766273bb37387dbf2c0539f17d1655f7c98f16d46554414810d7a29419177" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:05576f032a31971fcdcda4e4a32d7ba97d11b9b970988ed9588e2f7a681abd3e" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: golang.org/x/sys@v0.48.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "golang.org/x/term", "SPDXID": "SPDXRef-Package-46a92950e62f08b2", "versionInfo": "v0.46.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/term@v0.46.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:fdd766273bb37387dbf2c0539f17d1655f7c98f16d46554414810d7a29419177" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:05576f032a31971fcdcda4e4a32d7ba97d11b9b970988ed9588e2f7a681abd3e" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: golang.org/x/term@v0.46.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "golang.org/x/text", "SPDXID": "SPDXRef-Package-c923704387fa130b", "versionInfo": "v0.42.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/text@v0.42.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:fdd766273bb37387dbf2c0539f17d1655f7c98f16d46554414810d7a29419177" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:05576f032a31971fcdcda4e4a32d7ba97d11b9b970988ed9588e2f7a681abd3e" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: golang.org/x/text@v0.42.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "golang.org/x/time", "SPDXID": "SPDXRef-Package-5d8de7f2711af2e8", "versionInfo": "v0.15.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/golang.org/x/time@v0.15.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: golang.org/x/time@v0.15.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "google.golang.org/genproto/googleapis/api", "SPDXID": "SPDXRef-Package-333a9f4e702c1370", "versionInfo": "v0.0.0-20260803160001-6ac0973c030d", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260803160001-6ac0973c030d" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:fdd766273bb37387dbf2c0539f17d1655f7c98f16d46554414810d7a29419177" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:05576f032a31971fcdcda4e4a32d7ba97d11b9b970988ed9588e2f7a681abd3e" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: google.golang.org/genproto/googleapis/api@v0.0.0-20260803160001-6ac0973c030d" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "google.golang.org/genproto/googleapis/rpc", "SPDXID": "SPDXRef-Package-b897eb789d3864a9", "versionInfo": "v0.0.0-20260803160001-6ac0973c030d", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260803160001-6ac0973c030d" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:fdd766273bb37387dbf2c0539f17d1655f7c98f16d46554414810d7a29419177" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:05576f032a31971fcdcda4e4a32d7ba97d11b9b970988ed9588e2f7a681abd3e" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: google.golang.org/genproto/googleapis/rpc@v0.0.0-20260803160001-6ac0973c030d" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "google.golang.org/grpc", "SPDXID": "SPDXRef-Package-35b74622d4fe50a3", "versionInfo": "v1.83.2", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/grpc@v1.83.2" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:fdd766273bb37387dbf2c0539f17d1655f7c98f16d46554414810d7a29419177" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:05576f032a31971fcdcda4e4a32d7ba97d11b9b970988ed9588e2f7a681abd3e" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: google.golang.org/grpc@v1.83.2" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "google.golang.org/protobuf", "SPDXID": "SPDXRef-Package-cef12910182c6b58", "versionInfo": "v1.36.12-0.20260120151049-f2248ac996af", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/google.golang.org/protobuf@v1.36.12-0.20260120151049-f2248ac996af" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: google.golang.org/protobuf@v1.36.12-0.20260120151049-f2248ac996af" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "gopkg.in/evanphx/json-patch.v4", "SPDXID": "SPDXRef-Package-af16465bb5430c8b", "versionInfo": "v4.13.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: gopkg.in/evanphx/json-patch.v4@v4.13.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "gopkg.in/inf.v0", "SPDXID": "SPDXRef-Package-a42c3e6db5301979", "versionInfo": "v0.9.1", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/inf.v0@v0.9.1" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: gopkg.in/inf.v0@v0.9.1" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "gopkg.in/yaml.v3", "SPDXID": "SPDXRef-Package-afef3632562eabdc", "versionInfo": "v3.0.1", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/gopkg.in/yaml.v3@v3.0.1" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: gopkg.in/yaml.v3@v3.0.1" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "k8s.io/api", "SPDXID": "SPDXRef-Package-108b5c1f598a8bd0", "versionInfo": "v0.36.3", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/k8s.io/api@v0.36.3" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: k8s.io/api@v0.36.3" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "k8s.io/apimachinery", "SPDXID": "SPDXRef-Package-e0ae796558e6c7ca", "versionInfo": "v0.36.3", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/k8s.io/apimachinery@v0.36.3" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: k8s.io/apimachinery@v0.36.3" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "k8s.io/apiserver", "SPDXID": "SPDXRef-Package-992ec7ca44556b0c", "versionInfo": "v0.36.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/k8s.io/apiserver@v0.36.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: k8s.io/apiserver@v0.36.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "k8s.io/client-go", "SPDXID": "SPDXRef-Package-b45101919e70d174", "versionInfo": "v0.36.3", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/k8s.io/client-go@v0.36.3" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: k8s.io/client-go@v0.36.3" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "k8s.io/component-base", "SPDXID": "SPDXRef-Package-6592090a791ed1f4", "versionInfo": "v0.36.3", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/k8s.io/component-base@v0.36.3" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: k8s.io/component-base@v0.36.3" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "k8s.io/component-helpers", "SPDXID": "SPDXRef-Package-261fa168782dbf9f", "versionInfo": "v0.36.3", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/k8s.io/component-helpers@v0.36.3" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: k8s.io/component-helpers@v0.36.3" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "k8s.io/klog/v2", "SPDXID": "SPDXRef-Package-13669ec98c2a19c4", "versionInfo": "v2.140.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/k8s.io/klog/v2@v2.140.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: k8s.io/klog/v2@v2.140.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "k8s.io/kube-openapi", "SPDXID": "SPDXRef-Package-87afc79758c08259", "versionInfo": "v0.0.0-20260317180543-43fb72c5454a", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20260317180543-43fb72c5454a" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: k8s.io/kube-openapi@v0.0.0-20260317180543-43fb72c5454a" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "k8s.io/kube-state-metrics/v2", "SPDXID": "SPDXRef-Package-5b217b55fd5fc03", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/k8s.io/kube-state-metrics/v2" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:fdd766273bb37387dbf2c0539f17d1655f7c98f16d46554414810d7a29419177" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:05576f032a31971fcdcda4e4a32d7ba97d11b9b970988ed9588e2f7a681abd3e" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: k8s.io/kube-state-metrics/v2" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "k8s.io/sample-controller", "SPDXID": "SPDXRef-Package-8348c33a7cac7aa6", "versionInfo": "v0.36.3", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/k8s.io/sample-controller@v0.36.3" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: k8s.io/sample-controller@v0.36.3" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "k8s.io/streaming", "SPDXID": "SPDXRef-Package-9d3e6da07240746", "versionInfo": "v0.36.3", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/k8s.io/streaming@v0.36.3" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: k8s.io/streaming@v0.36.3" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "k8s.io/utils", "SPDXID": "SPDXRef-Package-e43685aea7dc497d", "versionInfo": "v0.0.0-20260210185600-b8788abfbbc2", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/k8s.io/utils@v0.0.0-20260210185600-b8788abfbbc2" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: k8s.io/utils@v0.0.0-20260210185600-b8788abfbbc2" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "media-types", "SPDXID": "SPDXRef-Package-6688b773a0ba90c6", "versionInfo": "13.0.0", "supplier": "Organization: Mime-Support Packagers \u003cteam+debian-mimesupport-packagers@tracker.debian.org\u003e", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "built package from: media-types 13.0.0", "licenseConcluded": "LicenseRef-50928525ea117d4d", "licenseDeclared": "LicenseRef-50928525ea117d4d", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:deb/debian/media-types@13.0.0?arch=all\u0026distro=debian-13.6" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:275a30dd8ce958b21daa9ad962c6fbc09f98306ee2f486b65c9075dc257b1412" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:97ae0a42274e126686192f377a2b4a112583630eadde1920a761ed910cdbde34" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: media-types@13.0.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: debian" } ] }, { "name": "netbase", "SPDXID": "SPDXRef-Package-400adfde70f70b8c", "versionInfo": "6.5", "supplier": "Organization: Marco d'Itri \u003cmd@linux.it\u003e", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "built package from: netbase 6.5", "licenseConcluded": "GPL-2.0-only", "licenseDeclared": "GPL-2.0-only", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:deb/debian/netbase@6.5?arch=all\u0026distro=debian-13.6" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:621c35e751a51a9a9dc3e80aa0b7fe8be2a93402ea6ccd307d30852cd7776cda" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:7750c1a1cd8e356f717610d15552bd8a4af1801b72b5855c9e8494cc07636e77" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: netbase@6.5" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: debian" } ] }, { "name": "sigs.k8s.io/apiserver-network-proxy/konnectivity-client", "SPDXID": "SPDXRef-Package-13ddd63971d7f8c1", "versionInfo": "v0.34.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.34.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.34.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "sigs.k8s.io/controller-runtime", "SPDXID": "SPDXRef-Package-7d518230bdaaec1", "versionInfo": "v0.24.1", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/sigs.k8s.io/controller-runtime@v0.24.1" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: sigs.k8s.io/controller-runtime@v0.24.1" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "sigs.k8s.io/json", "SPDXID": "SPDXRef-Package-e382efc0268b2160", "versionInfo": "v0.0.0-20250730193827-2d320260d730", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "sigs.k8s.io/randfill", "SPDXID": "SPDXRef-Package-5dbdd8270e328680", "versionInfo": "v1.0.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/sigs.k8s.io/randfill@v1.0.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: sigs.k8s.io/randfill@v1.0.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "sigs.k8s.io/structured-merge-diff/v6", "SPDXID": "SPDXRef-Package-3210dbb5b3a99ffd", "versionInfo": "v6.3.3", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.3.3" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: sigs.k8s.io/structured-merge-diff/v6@v6.3.3" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "sigs.k8s.io/yaml", "SPDXID": "SPDXRef-Package-b2b4cb7c8fea93ca", "versionInfo": "v1.6.0", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/sigs.k8s.io/yaml@v1.6.0" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:0e588eed50dc48fa4f85c2968ed097bf2741ed4155012ecaa2b65491c6f6f48f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:9ae08f2843c3ec49dfc1ce07f73252bc0b45b05968bfb0583ed9c12bd0129a5c" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: sigs.k8s.io/yaml@v1.6.0" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "stdlib", "SPDXID": "SPDXRef-Package-8b31b3d98fb87df1", "versionInfo": "v1.27.2", "supplier": "NOASSERTION", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "package found in: kube-state-metrics", "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:golang/stdlib@v1.27.2" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:fdd766273bb37387dbf2c0539f17d1655f7c98f16d46554414810d7a29419177" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:05576f032a31971fcdcda4e4a32d7ba97d11b9b970988ed9588e2f7a681abd3e" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: stdlib@v1.27.2" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: gobinary" } ] }, { "name": "tzdata", "SPDXID": "SPDXRef-Package-5b40ba312bc3d0ab", "versionInfo": "2026b-0+deb13u1", "supplier": "Organization: GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "built package from: tzdata 2026b-0+deb13u1", "licenseConcluded": "LicenseRef-abb60753a4b5686d", "licenseDeclared": "LicenseRef-abb60753a4b5686d", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:deb/debian/tzdata@2026b-0%2Bdeb13u1?arch=all\u0026distro=debian-13.6" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:c8b007d0206e4b10ed4d3b3d99dfeab47c2648e82011989fd78a5731baf33fc3" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:df0108779cfde4f630d46c0224ee569d2c5ad5cd40eb4bf2698b5395a6d4354f" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: tzdata@2026b-0+deb13u1" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: debian" } ] }, { "name": "tzdata-legacy", "SPDXID": "SPDXRef-Package-dc7e44f8594e52f7", "versionInfo": "2026b-0+deb13u1", "supplier": "Organization: GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e", "downloadLocation": "NONE", "filesAnalyzed": false, "sourceInfo": "built package from: tzdata 2026b-0+deb13u1", "licenseConcluded": "LicenseRef-abb60753a4b5686d", "licenseDeclared": "LicenseRef-abb60753a4b5686d", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceType": "purl", "referenceLocator": "pkg:deb/debian/tzdata-legacy@2026b-0%2Bdeb13u1?arch=all\u0026distro=debian-13.6" } ], "primaryPackagePurpose": "LIBRARY", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDiffID: sha256:bec7e6bb35e05d1284f28b10d2150c259717d91c658c4c10c08424bb9466caba" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "LayerDigest: sha256:4744ace31f426a693743a7132d1303e857e8a1ddc5508ce010eb584066b7044b" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgID: tzdata-legacy@2026b-0+deb13u1" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "PkgType: debian" } ] }, { "name": "debian", "SPDXID": "SPDXRef-OperatingSystem-f6073a41928fdcc9", "versionInfo": "13.6", "downloadLocation": "NONE", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "NOASSERTION", "primaryPackagePurpose": "OPERATING-SYSTEM", "annotations": [ { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "Class: os-pkgs" }, { "annotator": "Tool: trivy-0.75.0", "annotationDate": "2026-10-15T16:39:18Z", "annotationType": "OTHER", "comment": "Type: debian" } ] } ], "hasExtractedLicensingInfos": [ { "licenseId": "LicenseRef-12c6299793cdf486", "extractedText": "This component is licensed under \"verbatim\"", "name": "verbatim" }, { "licenseId": "LicenseRef-50928525ea117d4d", "extractedText": "This component is licensed under \"ad-hoc\"", "name": "ad-hoc" }, { "licenseId": "LicenseRef-abb60753a4b5686d", "extractedText": "This component is licensed under \"public-domain\"", "name": "public-domain" } ], "relationships": [ { "spdxElementId": "SPDXRef-Application-3d96aa61f4333256", "relatedSpdxElement": "SPDXRef-Package-5b217b55fd5fc03", "relationshipType": "CONTAINS" }, { "spdxElementId": "SPDXRef-ContainerImage-3cc25b491d1328b9", "relatedSpdxElement": "SPDXRef-Application-3d96aa61f4333256", "relationshipType": "CONTAINS" }, { "spdxElementId": "SPDXRef-ContainerImage-3cc25b491d1328b9", "relatedSpdxElement": "SPDXRef-OperatingSystem-f6073a41928fdcc9", "relationshipType": "CONTAINS" }, { "spdxElementId": "SPDXRef-DOCUMENT", "relatedSpdxElement": "SPDXRef-ContainerImage-3cc25b491d1328b9", "relationshipType": "DESCRIBES" }, { "spdxElementId": "SPDXRef-OperatingSystem-f6073a41928fdcc9", "relatedSpdxElement": "SPDXRef-Package-27f8cc7cccd02bf3", "relationshipType": "CONTAINS" }, { "spdxElementId": "SPDXRef-OperatingSystem-f6073a41928fdcc9", "relatedSpdxElement": "SPDXRef-Package-400adfde70f70b8c", "relationshipType": "CONTAINS" }, { "spdxElementId": "SPDXRef-OperatingSystem-f6073a41928fdcc9", "relatedSpdxElement": "SPDXRef-Package-5b40ba312bc3d0ab", "relationshipType": "CONTAINS" }, { "spdxElementId": "SPDXRef-OperatingSystem-f6073a41928fdcc9", "relatedSpdxElement": "SPDXRef-Package-6688b773a0ba90c6", "relationshipType": "CONTAINS" }, { "spdxElementId": "SPDXRef-OperatingSystem-f6073a41928fdcc9", "relatedSpdxElement": "SPDXRef-Package-dc7e44f8594e52f7", "relationshipType": "CONTAINS" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-1052eb956f47264c", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-108b5c1f598a8bd0", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-12262ad19c6fa302", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-12d6fdcdb8804205", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-13669ec98c2a19c4", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-13ddd63971d7f8c1", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-14fb30ace4035901", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-19b03b08a4a41fc1", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-1c7d4afe041e3d72", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-1d73bd6162375889", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-228ce380f5e071d9", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-25078db6a9fae536", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-261fa168782dbf9f", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-28afafaa14a4f90e", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-28e07cc131569e1f", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-2a261a3b2f59f060", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-2a960fdbf02a0d2a", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-2b61a950a0168619", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-308c6ebab961faac", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-3210dbb5b3a99ffd", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-333a9f4e702c1370", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-357138332f88ec1a", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-35a79359fb1fb553", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-35b74622d4fe50a3", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-38958c50e92ae811", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-3d46d518c88420c0", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-3f4bec9cf81381a6", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-40325c655ed8922", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-446595c6ad1462bc", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-46a92950e62f08b2", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-47f22868a2f5c0f4", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-4b0e3284d2e40733", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-4f1bd6850fea616e", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-538b1d077f32f9e4", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-578b409adc8d769", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-580e9a1a1a495ca5", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-597819019b62ebf8", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-5b2759f5a6bddbfc", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-5b65c1bca6d25cb", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-5d8de7f2711af2e8", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-5dbdd8270e328680", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-604ff633c35432da", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-6141767667e1da86", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-6370c5a0b80d451e", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-637a51189aa13404", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-6592090a791ed1f4", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-6f44a2b4240eac57", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-7108106cfece65ce", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-7273d24404cd4e43", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-72aadc949d6819dc", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-7942d834629abb45", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-7d518230bdaaec1", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-81a0fc6b0a6f5a50", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-823d2ae9390de751", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-82928618e1d9454c", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-8348c33a7cac7aa6", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-87afc79758c08259", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-89fadf686d99eeea", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-8b31b3d98fb87df1", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-97d2f2db7ea1f945", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-992ec7ca44556b0c", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-9aebc1434243c118", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-9d3e6da07240746", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-a42c3e6db5301979", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-aaddc643d9863fa5", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-ace83cb0f96e98eb", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-af16465bb5430c8b", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-afef3632562eabdc", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-b15616112cfd63f0", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-b2b4cb7c8fea93ca", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-b2c9cf22e28d8d80", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-b2d53ac4f7e030b", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-b3992f347013e3d9", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-b45101919e70d174", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-b897eb789d3864a9", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-c1537874806ed36a", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-c3749f6a5938c491", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-c8c688d455ea472b", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-c923704387fa130b", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-ca3caa6bcabbae03", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-cef12910182c6b58", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-cf1dad59bf66b3f7", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-d323bf027329a6a6", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-da488a5dd2a6a52b", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-dccebd3e88e43a4", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-dfd784db9a7c6d37", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-e025a71c9aeed52f", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-e04733f0acd56e07", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-e0ae796558e6c7ca", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-e382efc0268b2160", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-e43685aea7dc497d", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-e6b0b7fc97ac5f10", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-eaeabbfdde9f8b07", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-eb561c0598052af3", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-ed716379b57c503e", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-eeb428d53c94e39e", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-eee3fb57bad9b969", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-ef280874f24ec006", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-ef49e6dd936fd610", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-f0e6bba25d965b92", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-f7950ca87608ad18", "relationshipType": "DEPENDS_ON" }, { "spdxElementId": "SPDXRef-Package-5b217b55fd5fc03", "relatedSpdxElement": "SPDXRef-Package-fe9c49c27e09b4b", "relationshipType": "DEPENDS_ON" } ] }